CVE-2020-5753

2020-05-2014:15:11

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.1%

JSON

Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim’s Signal phone and disclose currently used DNS server due to ICE Candidate handling before call is answered or declined.

CPENameOperatorVersion
signal-ioseq2.20.0.6
signal-ioseq1.0.7
signal-ioseq2.25.0.27
signal-ioseq2.40.1.3
signal-ioseq2.25.0.8
signal-ioseq3.1.0.5
signal-ioseq2.43.1.5
signal-ioseq2.20.0.31
signal-ioseq2.35.0.7
signal-ioseq2.19.0.22

Name	Operator	Version
signal-ios	eq	2.20.0.6
signal-ios	eq	1.0.7
signal-ios	eq	2.25.0.27
signal-ios	eq	2.40.1.3
signal-ios	eq	2.25.0.8
signal-ios	eq	3.1.0.5
signal-ios	eq	2.43.1.5
signal-ios	eq	2.20.0.31
signal-ios	eq	2.35.0.7
signal-ios	eq	2.19.0.22

Rows per page:

1-10 of 9221

References

www.tenable.com/security/research/tra-2020-33