ALT-PU-2021-3448

Высокий

ALT-PU-2021-3448: package freeswitch update to version 1.10.7-alt1

Источник

errata.altlinux.org

Дата публикации

02.12.2021

Дата обновления

02.12.2021

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades freeswitch to version 1.10.7-alt1.

Устраненные уязвимости6

CVE-2021-36513

Высокий 7.5

Дата публикации: 18.10.2021

CWE-909

An issue was discovered in function sofia_handle_sip_i_notify in sofia.c in SignalWire freeswitch before 1.10.6, may allow attackers to view sensitive information due to an uninitialized value.

CVSS 3.1

Высокий 7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

CVSS 2.0

Средний 5

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Ссылки

CVE-2021-36513 https://nvd.nist.gov/vuln/detail/CVE-2021-36513

Ссылки1

ALT-PU-2021-3448 https://errata.altlinux.org/ALT-PU-2021-3448

Связанные уязвимости

ALT-PU-2021-3374

CVSS3: 7.5

altlinux

почти 5 лет назад

ALT-PU-2021-3374: package `freeswitch` update to version 1.10.7-alt1

ALT-PU-2021-1643

CVSS3: 7.5

altlinux

больше 5 лет назад

ALT-PU-2021-1643: package `freeswitch` update to version 1.10.6-alt1

CVE-2021-36513

CVSS3: 7.5

nvd

около 5 лет назад

An issue was discovered in function sofia_handle_sip_i_notify in sofia.c in SignalWire freeswitch before 1.10.6, may allow attackers to view sensitive information due to an uninitialized value.

CVE-2021-36513

CVSS3: 7.5

debian

около 5 лет назад

An issue was discovered in function sofia_handle_sip_i_notify in sofia ...

GHSA-jg94-6rjh-cfh5

github

больше 4 лет назад

An issue was discovered in function sofia_handle_sip_i_notify in sofia.c in SignalWire freeswitch before 1.10.6, may allow attackers to view sensitive information due to an uninitialized value.