freeswitch icon indicating copy to clipboard operation
freeswitch copied to clipboard

Published 20 hours ago • verified publisher icon signalwire

Outdated MiniUPnP

Open Garnik645 opened this issue 1 year ago • 0 comments

The project currently includes sources from the MiniUPnP project, located in the freeswitch/libs/miniupnpc/ directory. However those sources are pretty old and contain unpatched vulnerabilities like CVE-2015-6031. If MiniUPnP sources are used somewhere, I recommend updating the MiniUPnP files to the latest version. My report was primarily based on a static analysis tool developed at CAST, which flagged the potential vulnerability due to similarities in the codebase.

Garnik645 avatar Sep 30 '24 14:09 Garnik645