CVE-2021-36513: High severity freeswitch vulnerability
An issue was discovered in function sofiahandlesipinotify in sofia.c in SignalWire freeswitch before 1.10.6, may allow attackers to view sensitive information due to an uninitialized value.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-36513?
CVE-2021-36513 is a vulnerability in SignalWire freeswitch that may allow attackers to view sensitive information due to an uninitialized value.
What is the severity of CVE-2021-36513?
The severity of CVE-2021-36513 is high with a CVSS score of 7.5.
How does CVE-2021-36513 affect SignalWire freeswitch?
CVE-2021-36513 affects SignalWire freeswitch versions up to and excluding 1.10.6.
How can I fix CVE-2021-36513?
To fix CVE-2021-36513, upgrade to SignalWire freeswitch version 1.10.6 or later.
Where can I find more information about CVE-2021-36513?
You can find more information about CVE-2021-36513 on the following references: [GitHub Issue](https://github.com/signalwire/freeswitch/issues/1245), [GitHub Release](https://github.com/signalwire/freeswitch/releases/tag/v1.10.6), [Newreleases.io](https://newreleases.io/project/github/signalwire/freeswitch/release/v1.10.6).