Lucene search
Alpine Linux Development TeamALPINE:CVE-2021-41145HistoryOct 25, 2021 - 10:15 p.m.
CVE-2021-41145
2021-10-2522:15:00
Alpine Linux Development Team
security.alpinelinux.org
23
0.001 Low
EPSS
Percentile
37.5%
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. FreeSWITCH prior to version 1.10.7 is susceptible to Denial of Service via SIP flooding. When flooding FreeSWITCH with SIP messages, it was observed that after a number of seconds the process was killed by the operating system due to memory exhaustion. By abusing this vulnerability, an attacker is able to crash any FreeSWITCH instance by flooding it with SIP messages, leading to Denial of Service. The attack does not require authentication and can be carried out over UDP, TCP or TLS. This issue was patched in version 1.10.7.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | freeswitch | < 1.10.7-r0 | UNKNOWN |
| Alpine | 3.15-main | noarch | freeswitch | < 1.10.7-r0 | UNKNOWN |
| Alpine | 3.16-main | noarch | freeswitch | < 1.10.7-r0 | UNKNOWN |
| Alpine | 3.17-main | noarch | freeswitch | < 1.10.7-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | freeswitch | < 1.10.7-r0 | UNKNOWN |
| Alpine | 3.19-main | noarch | freeswitch | < 1.10.7-r0 | UNKNOWN |
Related
zdt
zdt
FreeSWITCH 1.10.6 SIP Flooding Denial Of Service Exploit
2021-10-26 00:00:00
packetstorm
packetstorm
FreeSWITCH 1.10.6 SIP Flooding Denial Of Service
2021-10-25 00:00:00
osv
osv
CVE-2021-41145
2021-10-25 22:15:07
prion
prion
Design/Logic Flaw
2021-10-25 22:15:00
cvelist
cvelist
CVE-2021-41145 FreeSWITCH susceptible to Denial of Service via SIP flooding
2021-10-25 22:05:11
veracode
veracode
Denial Of Service (DoS)
2021-11-05 10:25:50
cve
cve
CVE-2021-41145
2021-10-25 22:15:00
openvas
openvas
FreeSWITCH < 1.10.7 Multiple Vulnerabilities
2021-10-27 00:00:00