Priority HIGH 82
The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server or possibly have unspecified other impact.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01176 · Published 2023-03-15 · No fix listed CWE-120
Priority HIGH 66
A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.30411 · Published 2018-03-20 · No fix listed CWE-193
Priority HIGH 65
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.29303 · Published 2018-07-31 · No fix listed CWE-20
Priority HIGH 65
Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to cause a denial of service (memory corruption and pro…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.29222 · Published 2016-04-11 · No fix listed CWE-119
Priority MEDIUM 55
A vulnerability has been found in Kamailio 5.5.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00232 · Published 2025-10-27 · No fix listed CWE-404
Priority MEDIUM 55
A flaw has been found in Kamailio 5.5.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00241 · Published 2025-10-27 · No fix listed CWE-404
Priority MEDIUM 55
A vulnerability was detected in Kamailio 5.5.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00228 · Published 2025-10-27 · No fix listed CWE-119
Priority MEDIUM 55
A security vulnerability has been detected in Kamailio 5.5.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2025-10-27 · No fix listed CWE-119
Priority MEDIUM 48
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03581 · Published 2018-09-07 · No fix listed CWE-476
Priority MEDIUM 46
Insecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02165 · Published 2017-08-29 · No fix listed CWE-434
Priority MEDIUM 40
An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling components
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0058 · Published 2026-09-01 · No fix listed CWE-400
Priority LOW 39
An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the ims_registrar_pcscf module, specifically the pcscf_save_pending/save_pending path and security-agreement parsing in se…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00448 · Published 2026-09-01 · No fix listed CWE-362
Priority LOW 39
Kamailio is an open source implementation of a SIP Signaling Server.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00471 · Published 2026-04-08 · Fixed in 5.8.8, 6.0.6 +1 CWE-119
Priority LOW 34
The kamailio build in kamailio before 4.2.0-2 process allows local users to gain privileges.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00389 · Published 2017-06-27 · No fix listed CWE-264
Priority LOW 34
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailio_ctl.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00429 · Published 2017-09-07 · No fix listed CWE-264
Priority LOW 27
Kamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.01108 · Published 2020-11-18 · No fix listed CWE-444
Priority LOW 22
Kamailio is an open source implementation of a SIP Signaling Server.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00313 · Published 2026-04-08 · Fixed in 5.8.7, 6.0.5 CWE-125
THREATIST.IORead the docs