CVE-2013-2238
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in...
CVE-2013-2238 is a medium vulnerability (CVSS 6.8) in Freeswitch, published September 19, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.71%, the 86th percentile. Fixed in freeswitch 1.2.12-6.mga3.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 2.71%EPSS, 86th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.2.12-6.mga3freeswitch
Description
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
freeswitchMageia:3 | before 1.2.12-6.mga3 | 1.2.12-6.mga3 |
What each source reports
NVD Score used
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.
- Record
CVE-2013-2238- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.
- Record
CVE-2013-2238- Updated
- 2026-11-02
EUVDEUVD-2013-2189No score
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.
- Record
EUVD-2013-2189- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hhwm-5rv2-8r77No score
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in...
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.
- Record
GHSA-hhwm-5rv2-8r77- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVMGASA-2013-0279No score
Updated freeswitch packages fix security vulnerability
In FreeSWITCH before 1.2.12, if the routing configuration includes regular expressions that don't constrain the length of the input, buffer overflows are possible. Since these regular expressions are matched against untrusted input, remote code execution may be possible (CVE-2013-2238).
- Record
MGASA-2013-0279- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.