{"id":"CVE-2013-2238","aliases":["EUVD-2013-2189","GHSA-hhwm-5rv2-8r77","MGASA-2013-0279"],"status":"published","title":"Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in...","description":"Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02708,"percentile":0.86065,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2013-09-19T09:32:15Z","modified":"2026-06-16T23:52:59Z","fixes":[{"ecosystem":"Mageia:3","package":"freeswitch","fixed_in":["1.2.12-6.mga3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:3","package":"freeswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-6.mga3"}]}]}],"products":[{"vendor":"freeswitch","product":"freeswitch"}],"references":[{"url":"http://jira.freeswitch.org/browse/FS-5566","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","web"]},{"url":"http://www.openwall.com/lists/oss-security/2013/07/04/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2238"},{"url":"https://github.com/advisories/GHSA-hhwm-5rv2-8r77"},{"url":"https://advisories.mageia.org/MGASA-2013-0279.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10743","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2013/07/01/11","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-2238","description":"Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.","status":"published","published":"2013-09-30T20:00:00Z","modified":"2024-09-16T23:06:34.388Z","updated_at":"2026-11-02T14:34:55.825574Z"}],"euvd":[{"id":"EUVD-2013-2189","description":"Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.","status":"published","published":"2013-09-30T20:00:00Z","modified":"2024-09-16T23:06:34Z","updated_at":"2026-11-03T00:54:56.752396Z"}],"ghsa":[{"id":"GHSA-hhwm-5rv2-8r77","title":"Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in...","description":"Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.","status":"published","published":"2022-05-17T05:01:01Z","modified":"2023-01-28T05:02:51Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:51.685777Z"}],"nvd":[{"id":"CVE-2013-2238","description":"Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.","status":"published","published":"2013-09-30T22:55:04.697Z","modified":"2026-06-16T23:52:59.957Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:38.715467Z"}],"osv":[{"id":"MGASA-2013-0279","title":"Updated freeswitch packages fix security vulnerability","description":"In FreeSWITCH before 1.2.12, if the routing configuration includes\nregular expressions that don't constrain the length of the input, buffer\noverflows are possible. Since these regular expressions are matched\nagainst untrusted input, remote code execution may be possible\n(CVE-2013-2238).\n","status":"published","published":"2013-09-19T09:32:15Z","modified":"2026-04-16T06:26:17.444130232Z","updated_at":"2026-11-02T15:49:39.121227Z"}]}}