PT-2023-8586 · Unknown+1 · Freeswitch+1

CVE-2023-51443 · Publicado 2023-09-27 · Atualizado 2024-02-02

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.10.11

Description The issue is related to incorrect handling of exceptional states in the FreeSWITCH software-defined telecom stack, which can lead to a Denial of Service (DoS) when handling DTLS-SRTP for media setup. An attacker can exploit this by sending a ClientHello DTLS message with an invalid CipherSuite, such as TLS NULL WITH NULL NULL, to the FreeSWITCH server, resulting in a DTLS error and tearing down the media session, followed by a teardown at the signaling (SIP) level. This can lead to a massive Denial of Service on vulnerable FreeSWITCH servers for calls that rely on DTLS-SRTP.

Recommendations To address this vulnerability, upgrade FreeSWITCH to version 1.10.11, which includes the security fix that drops all packets from addresses that have not been validated by an ICE check.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-703

Identificadores relacionados

ALT-PU-2024-1178

ALT-PU-2024-1184

BDU:2024-01229

CVE-2023-51443

GHSA-39GV-HQ72-J6M6

Produtos afetados

Alt Linux

Freeswitch

Referências · 22

• 🔥 https://github.com/signalwire/freeswitch/security/advisories/GHSA-39gv-hq72-j6m6 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/51xxx/CVE-2023-51443.json · Exploit
• 🔥 http://packetstormsecurity.com/files/176393/FreeSWITCH-Denial-Of-Service.html · Exploit
• https://github.com/signalwire/freeswitch/commit/86cbda90b84ba186e508fbc7bfae469270a97d11 · Correção
• https://github.com/signalwire/freeswitch/security/advisories/GHSA-39gv-hq72-j6m6%20https://github.com/signalwire/freeswitch/commit/86cbda90b84ba186e508fbc7bfae469270a97d11 · Nota
• https://osv.dev/vulnerability/ALPINE-CVE-2023-51443 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-51443 · Aviso do Fabricante
• https://twitter.com/ksg93rd/status/1741535344216981599 · Publicação no Twitter
• https://t.me/defcon_news/121031 · Publicação no Telegram
• http://seclists.org/fulldisclosure/2023/Dec/29 · Nota
• https://twitter.com/RedPacketSec/status/1739950222774534239 · Publicação no Twitter
• https://twitter.com/oss_security/status/1738632325364170896 · Publicação no Twitter
• https://t.me/cvenotify/65239 · Publicação no Telegram
• https://t.me/cvenotify/66619 · Publicação no Telegram
• https://t.me/cvenotify/66223 · Publicação no Telegram