CVE-2021-41145

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. FreeSWITCH prior to version 1.10.7 is susceptible to Denial of Service via SIP flooding. When flooding FreeSWITCH with SIP messages, it was observed that after a number of seconds the process was killed by the operating system due to memory exhaustion. By abusing this vulnerability, an attacker is able to crash any FreeSWITCH instance by flooding it with SIP messages, leading to Denial of Service. The attack does not require authentication and can be carried out over UDP, TCP or TLS. This issue was patched in version 1.10.7.

• CWE-400
• CWE-401

• https://github.com/signalwire/freeswitch/releases/tag/v1.10.7Release Notes, Third Party Advisory
• https://github.com/signalwire/freeswitch/security/advisories/GHSA-jvpq-23v4-gp3mExploit, Third Party Advisory
• https://github.com/signalwire/freeswitch/releases/tag/v1.10.7Release Notes, Third Party Advisory
• https://github.com/signalwire/freeswitch/security/advisories/GHSA-jvpq-23v4-gp3mExploit, Third Party Advisory

Published

Oct 25, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4114Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-41140Discourse-reactions is a plugin for the Discourse platform t…5.3
• CVE-2021-41141PJSIP is a free and open source multimedia communication lib…7.5
• CVE-2021-41142Tuleap Open ALM is a libre and open source tool for end to e…5.4
• CVE-2021-41143OpenMage LTS is an e-commerce platform. Prior to versions 19…7.2
• CVE-2021-41144OpenMage LTS is an e-commerce platform. Prior to versions 19…8.8
• CVE-2021-41146qutebrowser is an open source keyboard-focused browser with …8.8
• CVE-2021-41147Tuleap Open ALM is a libre and open source tool for end to e…7.2
• CVE-2021-41148Tuleap Open ALM is a libre and open source tool for end to e…8.8
• CVE-2021-41149Tough provides a set of Rust libraries and tools for using a…8.1
• CVE-2021-4115There is a flaw in polkit which can allow an unprivileged us…5.5
• CVE-2021-41150Tough provides a set of Rust libraries and tools for using a…6.5