PT-2023-8586 · Unknown+1 · Freeswitch+1

Published 2023-09-27 · Updated 2024-02-02 · CVE-2023-51443

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.10.11

Description The issue is related to incorrect handling of exceptional states in the FreeSWITCH software-defined telecom stack, which can lead to a Denial of Service (DoS) when handling DTLS-SRTP for media setup. An attacker can exploit this by sending a ClientHello DTLS message with an invalid CipherSuite, such as TLS NULL WITH NULL NULL, to the FreeSWITCH server, resulting in a DTLS error and tearing down the media session, followed by a teardown at the signaling (SIP) level. This can lead to a massive Denial of Service on vulnerable FreeSWITCH servers for calls that rely on DTLS-SRTP.

Recommendations To address this vulnerability, upgrade FreeSWITCH to version 1.10.11, which includes the security fix that drops all packets from addresses that have not been validated by an ICE check.

Exploit

Fix

DoS

Weakness Enumeration

CWE-703

Related Identifiers

ALT-PU-2024-1178

ALT-PU-2024-1184

BDU:2024-01229

CVE-2023-51443

GHSA-39GV-HQ72-J6M6

Affected Products

Alt Linux

Freeswitch

References · 22

• 🔥 https://github.com/signalwire/freeswitch/security/advisories/GHSA-39gv-hq72-j6m6 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/51xxx/CVE-2023-51443.json · Exploit
• 🔥 http://packetstormsecurity.com/files/176393/FreeSWITCH-Denial-Of-Service.html · Exploit
• https://github.com/signalwire/freeswitch/commit/86cbda90b84ba186e508fbc7bfae469270a97d11 · Patch
• https://osv.dev/vulnerability/ALPINE-CVE-2023-51443 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-51443 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01229 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-51443 · Security Note
• https://github.com/signalwire/freeswitch/security/advisories/GHSA-39gv-hq72-j6m6%20https://github.com/signalwire/freeswitch/commit/86cbda90b84ba186e508fbc7bfae469270a97d11 · Note
• https://twitter.com/ksg93rd/status/1741535344216981599 · Twitter Post
• https://t.me/defcon_news/121031 · Telegram Post
• http://seclists.org/fulldisclosure/2023/Dec/29 · Note
• https://twitter.com/RedPacketSec/status/1739950222774534239 · Twitter Post
• https://twitter.com/oss_security/status/1738632325364170896 · Twitter Post
• https://t.me/cvenotify/65239 · Telegram Post