ALT-PU-2015-1882: package freeswitch update to version 1.4.23-alt1
Описание
This update upgrades freeswitch to version 1.4.23-alt1.
Устраненные уязвимости1
Связанные уязвимости
Heap-based buffer overflow in the parse_string function in libs/esl/src/esl_json.c in FreeSWITCH before 1.4.23 and 1.6.x before 1.6.2 allows remote attackers to execute arbitrary code via a trailing \u in a json string to cJSON_Parse.
Heap-based buffer overflow in the parse_string function in libs/esl/sr ...
Heap-based buffer overflow in the parse_string function in libs/esl/src/esl_json.c in FreeSWITCH before 1.4.23 and 1.6.x before 1.6.2 allows remote attackers to execute arbitrary code via a trailing \u in a json string to cJSON_Parse.