FreeSWITCH buffer overflow

Buffer overflow on JSON parsing...

CVE-2015-7392

Heap-based buffer overflow in the parsestring function in libs/esl/src/esljson.c in FreeSWITCH before 1.4.23 and 1.6.x before 1.6.2 allows remote attackers to execute arbitrary code via a trailing \u in a json string to cJSONParse...

Heap overflow

Heap-based buffer overflow in the parsestring function in libs/esl/src/esljson.c in FreeSWITCH before 1.4.23 and 1.6.x before 1.6.2 allows remote attackers to execute arbitrary code via a trailing \u in a json string to cJSONParse...

CVE-2015-7392

Heap-based buffer overflow in the parsestring function in libs/esl/src/esljson.c in FreeSWITCH before 1.4.23 and 1.6.x before 1.6.2 allows remote attackers to execute arbitrary code via a trailing \u in a json string to cJSONParse...

CVE-2015-7392

CVE-2015-7392 is a heap-based overflow in FreeSWITCH’s JSON parser. The flaw lives in the parse_string function of esl_json.c and is exploitable via a crafted JSON string to cJSON_Parse, affecting FreeSWITCH < 1.4.23 and

CVE-2015-7392: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the parsestring function in libs/esl/src/esljson.c in FreeSWITCH before 1.4.23 and 1.6.x before 1.6.2 allows remote attackers to execute arbitrary code via a trailing \u in a json string to cJSONParse...

PT-2015-7546

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.4.23 FreeSWITCH versions 1.6.x prior to 1.6.2 Description The issue is related to a heap-based buffer overflow in the parse string function, located in libs/esl/src/esl json.c. This allows remote attackers to...

freeswitch Heap Overflow Vulnerability

The JSON parser in freeswitch versions prior to 1.6.2 and 1.4.23 suffer from a heap overflow vulnerability. 1. Advisory Information Title: Heap overflow in freeswitch json parser 1.6.2 & 1.4.23 Submitter: Marcello Duarte email protected Product: freeswitch Product URL: http://freeswitch.org...

FreeSWITCH 'switch_regex.c' Multiple Buffer Overflow Vulnerabilities

FreeSWITCH is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

FreeSWITCH Detection (SIP)

Detection of FreeSWITCH over SIP. This script performs SIP based detection of FreeSWITCH. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2013-2238

Multiple buffer overflows in the switchperformsubstitution function in switchregex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to the index and substituted variables...

Buffer overflow

Multiple buffer overflows in the switchperformsubstitution function in switchregex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to the index and substituted variables...

CVE-2013-2238

Summary: CVE-2013-2238 affects FreeSWITCH 1.2.x. Multiple buffer overflows in the switch_perform_substitution logic of switch_regex.c can be triggered by crafted inputs, potentially causing a crash (DoS) and possibly enabling remote code execution. Affected product/component: FreeSWITCH 1.2.x (no...

CVE-2013-2238

Multiple buffer overflows in the switchperformsubstitution function in switchregex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to the index and substituted variables...

CVE-2013-2238: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the switchperformsubstitution function in switchregex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to the index and substituted variables...

Updated freeswitch packages fix security vulnerability

In FreeSWITCH before 1.2.12, if the routing configuration includes regular expressions that don't constrain the length of the input, buffer overflows are possible. Since these regular expressions are matched against untrusted input, remote code execution may be possible CVE-2013-2238...

MGASA-2013-0279 Updated freeswitch packages fix security vulnerability

In FreeSWITCH before 1.2.12, if the routing configuration includes regular expressions that don't constrain the length of the input, buffer overflows are possible. Since these regular expressions are matched against untrusted input, remote code execution may be possible CVE-2013-2238...

[SQLi] vBilling for FreeSWITCH

vBilling for FreeSWITCH. http://blaszczakm.blogspot.com/2013/04/vbilling-freeswitch-sqli.html Michal Blaszczak 1 SQL Injection reset password any SIP account file: controllers/customer.php $sql2 = "UPDATE directoryparams SET paramvalue = '".$newpassword."' WHERE directoryid = '".$recordid."' "; 2...

FreeSWITCH vBilling SQL Injection

vBilling for FreeSWITCH. http://blaszczakm.blogspot.com/2013/04/vbilling-freeswitch-sqli.html Michal Blaszczak 1 SQL Injection reset password any SIP account file: controllers/customer.php $sql2 = "UPDATE directoryparams SET paramvalue = '".$newpassword."' WHERE directoryid = '".$recordid."' "; 2...

FreeSWITCH Route Header Value Handling DoS

According to its self-reported version, the remote FreeSWITCH install is affected by a denial of service vulnerability in the Sofia SIP stack. A remote attacker can exploit this, via a specially crafted INVITE request with a 'Route' value containing a long list, to crash the service. %NASLMINLEVE...