FreeSWITCH 1.10.6 SIP Flooding Denial Of Service Exploit

FreeSWITCH susceptible to Denial of Service via SIP flooding - Fixed versions: v1.10.7 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-06-freeswitch-flood-dos - Vendor Security Advisory:...

CVE-2021-41145

Concretely, CVE-2021-41145 affects FreeSWITCH and interfaces exposing a DoS vector before version 1.10.7: an attacker can flood the SIP stack (via UDP/TCP/TLS) and exhaust memory, crashing the server without authentication. The issue was fixed in 1.10.7. Additional PTSecurity entries describe rel...

FreeSWITCH 1.10.6 SIP Flooding Denial Of Service

FreeSWITCH susceptible to Denial of Service via SIP flooding - Fixed versions: v1.10.7 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-06-freeswitch-flood-dos - Vendor Security Advisory:...