Lucene search

CVE-2023-28099

🗓️ 15 Mar 2023 23:09:15Reported by GitHub_MType

OpenSIPS SIP server prior to versions 3.1.9 and 3.2.6 allows crash via invalid IP address input

Reporter	Title	Published	Views	Family All 6
OSV	CVE-2023-28099	15 Mar 202323:15	–	osv
NVD	CVE-2023-28099	15 Mar 202323:15	–	nvd
Cvelist	CVE-2023-28099 OpenSIPS has vulnerability in the ds_is_in_list() function	15 Mar 202322:16	–	cvelist
Prion	Design/Logic Flaw	15 Mar 202323:15	–	prion
UbuntuCve	CVE-2023-28099	15 Mar 202300:00	–	ubuntucve
Vulnrichment	CVE-2023-28099 OpenSIPS has vulnerability in the ds_is_in_list() function	15 Mar 202322:16	–	vulnrichment

Nvd

Vulners

Node

opensips opensipsRange<3.1.9

opensips opensipsRange3.2.0–3.2.6

[
  {
    "vendor": "OpenSIPS",
    "product": "opensips",
    "versions": [
      {
        "version": "< 3.1.9",
        "status": "affected"
      },
      {
        "version": ">= 3.2.0, < 3.2.6",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/OpenSIPS/opensips/security/advisories/GHSA-pfm5-6vhv-3ff3
github	www.github.com/OpenSIPS/opensips/issues/2780
github	www.github.com/OpenSIPS/opensips/commit/e2f13d374

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Mar 2023 23:15Current

6.5Medium risk

Vulners AI Score6.5

CVSS35.9 - 7.5

EPSS0.00327

SSVC

CWE-20