s
signalwire
Security Risk Profile
56
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 18, 2021 to present
7
Total CVEs
6
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
8.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
56/100
medium
Severity Distribution
Critical
2High
4Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Integer Overflow
1
Most Affected Products
1. ubuntu/sofia-sip7
2. debian/sofia-sip5
3. SignalWire Sofia-sip5
4. Debian Debian Linux5
5. SignalWire freeswitch2
Recent Vulnerabilities
See more →https://seclists.org/oss-sec/2023/q4/328
unknown
[ES2023-02] FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation
Dec 23, 2023🔧 No Patch
CVE-2023-32307
CVSS 7.5high
heap-over-flow and integer-overflow in sofia-sip
May 26, 2023
CVE-2023-22741
CVSS 9.8critical
heap-over-flow in stun_parse_attribute in sofia-sip
Jan 19, 2023
CVE-2022-31003
CVSS 9.8critical
Heap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIP
May 31, 2022
CVE-2022-31001
CVSS 7.5high
Out-of-bounds Read in Sofia-SIP
May 31, 2022
CVE-2022-31002
CVSS 7.5high
Out-of-bounds Read in Sofia-SIP
May 31, 2022
CVE-2021-36513
CVSS 7.5high
Oct 18, 2021🔧 No Patch
Monitor signalwire in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.