CVE-2023-40018 - CVE House
Back to Database
Status published High CVE-2023-40018

FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown component ID

Vulnerability Description

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.10, FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown component ID. When an SDP is offered with any ICE candidates with an unknown component ID, FreeSWITCH will make an out of bounds write to its arrays. By abusing this vulnerability, an attacker is able to corrupt FreeSWITCH memory leading to an undefined behavior of the system or a crash of it. Version 1.10.10 contains a patch for this issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-40018

Credits & Attribution

No credits recorded in the NVD database.

References

More from signalwire

View All →
CVE-2023-51443
FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation
High 7.5
CVE-2023-40019
FreeSWITCH allows authorized users to cause a denial of service attack by sending re-INVITE with SDP containing duplicate codec names
High 7.5
CVE-2021-41158
FreeSWITCH vulnerable to SIP digest leak for configured gateways
Medium 5.8
CVE-2021-41157
FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default
Medium 5.3
CVE-2021-41145
FreeSWITCH susceptible to Denial of Service via SIP flooding
High 8.6

Affected Vendor

Affected Software

freeswitch
Vulnerable Versions:
< 1.10.10

Timeline

Official Publish: September 15th, 2023
Last Modified: September 25th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-787

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control
T1485 Data Destruction
Impact