Buffer Overflow Vulnerability in FreeSWITCH by SignalWire
CVE-2013-2238

Currently unrated

Key Information:

Vendor

Freeswitch

Status
Freeswitch
Vendor
CVE Published:
30 September 2013

What is CVE-2013-2238?

A buffer overflow vulnerability exists in the switch_perform_substitution function within the switch_regex.c file in FreeSWITCH 1.2. This flaw allows remote attackers to exploit the system, potentially leading to a denial of service that may crash the application. Attackers can leverage issues with the index and substituted variables to execute arbitrary code, raising significant security concerns for deployments using this version of FreeSWITCH.

References

http://jira.freeswitch.org/browse/FS-5566
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2013/07/04/4
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.