signalwire freeswitch güvenlik açıkları
signalwire
- Toplam açık
- 21
- Kritik
- 3
- Aktif istismar
- 0
- Yaması çıkan
- 21
- Son açık
- 2 sa önce
Önem dağılımı
- Kritik 3
- Yüksek 12
- Orta 5
- Düşük 1
Son açıklar
21 açık
- 7,5Yüksek CVE-2026-116782Yama var FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling
- 8,2Yüksek CVE-2026-116783Yama var FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data
- 9,1Kritik CVE-2026-116790Yama var FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY
- 8,2Yüksek CVE-2026-116788Yama var FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding
- 2,7Düşük CVE-2026-116780Yama var FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via `${variable:offset}` slicing
- 7,5Yüksek CVE-2026-116784Yama var FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsing
- 9,8Kritik CVE-2026-116779Yama var FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
- 7,4Yüksek CVE-2026-116789Yama var FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server
- 5,3Orta CVE-2026-116781Yama var FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing
- 9,1Kritik CVE-2026-116785Yama var FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling
- 8,8Yüksek CVE-2026-116786Yama var FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia
- 7,5Yüksek CVE-2026-116787Yama var FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length
- 7,5Yüksek CVE-2026-116567Yama var FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handling
- 5,9Orta CVE-2026-116571Yama var FreeSWITCH: Stack buffer overflow in mod_rtmp AVC sequence-header construction
- 7,5Yüksek CVE-2026-116570Yama var FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication
- 7,5Yüksek CVE-2026-116569Yama var FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing
- 7,5Yüksek CVE-2026-116568Yama var FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsing
- 6,5Orta CVE-2026-116572Yama var FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP Contact display-name
- 7,5Yüksek CVE-2026-115928Yama var FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls
- 5,9Orta CVE-2026-116574Yama var FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequences
- 6,5Orta CVE-2026-116573Yama var FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP To-header user