CVE-2013-2238
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in...
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.
- Record
CVE-2013-2238- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.
- Record
CVE-2013-2238- Updated
- 2026-11-02
EUVDEUVD-2013-2189 No score
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.
- Record
EUVD-2013-2189- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hhwm-5rv2-8r77 No score
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in...
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.
- Record
GHSA-hhwm-5rv2-8r77- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVMGASA-2013-0279 No score
Updated freeswitch packages fix security vulnerability
In FreeSWITCH before 1.2.12, if the routing configuration includes regular expressions that don't constrain the length of the input, buffer overflows are possible. Since these regular expressions are matched against untrusted input, remote code execution may be possible (CVE-2013-2238).
- Record
MGASA-2013-0279- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
freeswitchMageia:3 |
before 1.2.12-6.mga3 | 1.2.12-6.mga3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2238 is a medium vulnerability (CVSS 6.8) in Freeswitch, published September 19, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.71%, the 86th percentile. Fixed in freeswitch 1.2.12-6.mga3.