282 matches found
CVE-2023-27601: Improper Input Validation
OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, OpenSIPS crashes when a malformed SDP body is received and is processed by the deletesdpline function in the sipmsgops module. This issue can be reproduced by calling the function with an SDP...
CVE-2023-27598: Use of Uninitialized Resource
OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, sending a malformed Via header to OpenSIPS triggers a segmentation fault when the function calctagsuffix is called. A specially crafted Via header, which is deemed correct by the parser, will...
PT-2023-21559 · Opensips · Opensis
Name of the Vulnerable Software and Affected Versions: OpenSIPS versions prior to 3.1.9 and 3.2.6 Description: OpenSIPS is a Session Initiation Protocol SIP server implementation. If the ds is in list function is used with an invalid IP address string, OpenSIPS will attempt to print a string from...
OpenSIPS 输入验证错误漏洞
OpenSIPS is a GPL-licensed SIP server implementation by the OpenSIPS Individual Developer. An input validation error vulnerability exists in OpenSIPS version 3.2 and earlier. An attacker could exploit this vulnerability to cause a system crash via a specially crafted authorization header...
OpenSIPS 安全漏洞
OpenSIPS is a GPL-licensed SIP server implementation from the OpenSIPS Individual Developer. A security vulnerability exists in OpenSIPS versions prior to 3.1.8 and 3.2.5, which stems from a crash in OpenSIPS when a malformed SDP subject is sent multiple times to an OpenSIPS configuration using t...
PT-2023-21237 · Opensips · Opensis
Name of the Vulnerable Software and Affected Versions: OpenSIPS versions prior to 3.1.8 and 3.2.5 Description: OpenSIPS is a Session Initiation Protocol SIP server implementation. When a specially crafted SIP message is processed by the function rewrite ruri, a crash occurs due to a segmentation...
CVE-2023-28099: Improper Input Validation
OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.9 and 3.2.6, if dsisinlist is used with an invalid IP address string NULL is illegal input, OpenSIPS will attempt to print a string from a random address stack garbage, which could lead to a crash. All user...
CVE-2023-28096: Missing Release of Memory after Effective Lifetime
OpenSIPS, a Session Initiation Protocol SIP server implementation, has a memory leak starting in the 2.3 branch and priot to versions 3.1.8 and 3.2.5. The memory leak was detected in the function parsemirequest while performing coverage-guided fuzzing. This issue can be reproduced by sending...
CVE-2023-27600: Improper Input Validation
OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, OpenSIPS crashes when a malformed SDP body is received and is processed by the deletesdpline function in the sipmsgops module. This issue can be reproduced by calling the function with an SDP...
CVE-2023-27599: Improper Input Validation
OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, when the function appendhf handles a SIP message with a malformed To header, a call to the function abort is performed, resulting in a crash. This is due to the following check in datalump.c:39...
CVE-2023-27597: Improper Input Validation
OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.8 and 3.2.5, when a specially crafted SIP message is processed by the function rewriteruri, a crash occurs due to a segmentation fault. This issue causes the server to crash. It affects configurations...
OpenSIPS 输入验证错误漏洞
OpenSIPS is a GPL-licensed SIP server implementation from the individual developers of OpenSIPS. An input validation error vulnerability exists in OpenSIPS prior to 3.1.8 and prior to 3.2.5, which stems from a segmentation error that causes a crash when the rewriteruri function processes speciall...
PT-2023-21558 · Opensips · Opensis
Name of the Vulnerable Software and Affected Versions: OpenSIPS versions prior to 3.1.7 OpenSIPS versions prior to 3.2.4 Description: OpenSIPS is a Session Initiation Protocol SIP server implementation. A specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected w...
CVE-2023-27596: Allocation of Resources Without Limits or Throttling
OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.8 and 3.2.5, OpenSIPS crashes when a malformed SDP body is sent multiple times to an OpenSIPS configuration that makes use of the streamprocess function. This issue was discovered during coverage guided...
CVE-2013-3722
A Denial of Service infinite loop exists in OpenSIPS before 1.10 in lookup.c...
CVE-2013-3722
A Denial of Service infinite loop exists in OpenSIPS before 1.10 in lookup.c...
Denial of service
A Denial of Service infinite loop exists in OpenSIPS before 1.10 in lookup.c...
CVE-2013-3722
OpenSIPS vulnerability CVE-2013-3722 affects the OpenSIPS project prior to version 1.10, in the file lookup.c. The root cause is an infinite loop that can cause a Denial of Service, impacting availability (per CVSS scores: CVSS27.5? actually 5.0/7.5; availability impact listed as PARTIAL/HIGH). T...
