Skip to content

Commit

Permalink
fixed some grammar mistakes
Browse files Browse the repository at this point in the history
  • Loading branch information
sandrogauci committed Oct 25, 2021
1 parent 514e393 commit b9834c0
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 2 deletions.
2 changes: 1 addition & 1 deletion ES2021-06-freeswitch-flood-dos/README.md
Expand Up @@ -99,7 +99,7 @@ By abusing this vulnerability, an attacker is able to crash any FreeSWITCH insta
```
5. Notice that the memory consumption of FreeSWITCH increases rapidly over time, until FreeSWITCH is killed by the underlying operating system

Note that in some cases where the test machine under attack has more memory resources, the attack done over UDP may not succeed in consuming all system memory. During our testing with SIPVicious PRO, however, we could always get the process to consume all the system's memory when the attack is done cover TCP.
Note that in some cases where the test machine under attack has more memory resources, the attack done over UDP may not succeed in consuming all system memory. During our testing with SIPVicious PRO, however, we could always get the process to consume all the system's memory when the attack is done over TCP.

## Solution and recommendations

Expand Down
2 changes: 1 addition & 1 deletion ES2021-07-freeswitch-SIP-MESSAGE-without-auth/README.md
Expand Up @@ -60,7 +60,7 @@ Upgrade to a version of FreeSWITCH that fixes this issue.

Our suggestion to the FreeSWITCH developers was the following:

> Our recommendation is that this SIP message type is authenticated by default so that FreeSWITCH administrators do not need to be explicitly set the `auth-messages` parameter. When following such a recommendation, a new parameter can be introduced to explicitly disable authentication.
> Our recommendation is that this SIP message type is authenticated by default so that FreeSWITCH administrators do not need to explicitly set the `auth-messages` parameter. When following such a recommendation, a new parameter can be introduced to explicitly disable authentication.
## About Enable Security

Expand Down

0 comments on commit b9834c0

Please sign in to comment.