OpenSIPS

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

OpenSIPS records in CISA KEV

No OpenSIPS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Opensips 12 records MEDIUM

Records

12 records in Opensips · all components

TI-2023-12676 CVE-2023-28097

OpenSIPS has vulnerability in the Content-Length Parser

MEDIUM 41

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00969 Published 2023-03-15 Fixed in 3.1.9, 3.2.6 CWE-190

TI-2023-12674 CVE-2023-28095

OpenSIPS has vulnerability in the building the local negative replies

MEDIUM 41

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00969 Published 2023-03-15 Fixed in 3.1.7, 3.2.4 CWE-20

TI-2023-12311 CVE-2023-27601

OpenSIPS has vulnerability in the codec_delete_XX() functions

MEDIUM 41

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0099 Published 2023-03-15 Fixed in 3.1.7, 3.2.4 CWE-20

TI-2023-12310 CVE-2023-27600

OpenSIPS has vulnerability in the codec_delete_XX() functions

MEDIUM 41

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0099 Published 2023-03-15 Fixed in 3.1.7, 3.2.4 CWE-20

TI-2023-12309 CVE-2023-27599

OpenSIPS has vulnerability in the parse_to_param() function

MEDIUM 41

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00971 Published 2023-03-15 Fixed in 3.1.7, 3.2.4 CWE-20

TI-2023-12308 CVE-2023-27598

OpenSIPS has vulnerability in the parse_via() function

MEDIUM 41

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00971 Published 2023-03-15 Fixed in 3.1.7, 3.2.4 CWE-908

TI-2023-12307 CVE-2023-27597

OpenSIPS has vulnerability in the parse_uri() function

MEDIUM 40

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00738 Published 2023-03-15 Fixed in 3.1.8, 3.2.5 CWE-20

TI-2023-12306 CVE-2023-27596

OpenSIPS has vulnerability in the codec_delete_XX() functions

MEDIUM 40

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00738 Published 2023-03-15 Fixed in 3.1.8, 3.2.5 CWE-770

TI-2023-12678 CVE-2023-28099

OpenSIPS has vulnerability in the ds_is_in_list() function

LOW 35

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-03-15 Fixed in 3.1.9, 3.2.6 CWE-20

TI-2023-12677 CVE-2023-28098

OpenSIPS has vulnerability in the Digest Authentication Parser

LOW 35

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-03-15 Fixed in 3.1.7, 3.2.4 CWE-20

TI-2013-03243 CVE-2013-3722 · GHSA-gf9x-6xqh-g38j

A Denial of Service (infinite loop) exists in OpenSIPS before 1.10 in lookup.c.

LOW 35

A Denial of Service (infinite loop) exists in OpenSIPS before 1.10 in lookup.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01106 Published 2020-02-17 No fix listed CWE-835

TI-2023-12675 CVE-2023-28096

OpenSIPS has memory leak in cJSON lib

LOW 34

OpenSIPS, a Session Initiation Protocol (SIP) server implementation, has a memory leak starting in the 2.3 branch and priot to versions 3.1.8 and 3.2.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00767 Published 2023-03-15 Fixed in 3.1.8, 3.2.5 CWE-401

Open these records in search →