CVE-2020-5753

5.3

MEDIUMCVSS v3

Published

May 20, 2020

CVSS v2

5 MEDIUM

Affected

8 projects

Assigned by

[email protected]

Severity scale

010

Description

Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used DNS server due to ICE Candidate handling before call is answered or declined.

@dmail/signal

NPM[![npm](https://badge.fury.io/js/%40dmail%2Fsignal.svg)](https://badge.fury.io/js/%40dmail%2Fsignal) [![build](https://travis-ci.org/dmail/signal.svg?branch=master)](http://travis-ci.org/dmail/signal) [![codecov](https://codecov.io/gh/dmail/signal/branch/

<= 3.8.1.5NVD