Read the docs
TI-2026-63221 Aliases CVE-2026-93962GHSA-3jw7-c3qg-43hw

Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-based overflow

Priority HIGH 70CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shm_malloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 6.0.8 is sufficient to resolve this issue. This patch is called 38711a3e788de0130d48cb485578c482b57d9351/4f62235b6f477b649c5cc18b0c81b4e26c949b98/4f62235b6f477b649c5cc18b0c81b4e26c949b98. You should upgrade the affected component.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0069 53rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed Kamailio: 6.0.8

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Kamailio5.8.0; 5.8.1; 5.8.2; 5.8.3; 5.8.4; 5.8.5; 5.8.6; 5.8.7; 5.8.8; 6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; 6.0.6; 6.0.7; 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.2.0-dev16.0.8Patch availableCNA
  • Kamailio Vendor— Affected 5.8.0; 5.8.1; 5.8.2; 5.8.3; 5.8.4; 5.8.5; 5.8.6; 5.8.7; 5.8.8; 6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; 6.0.6; 6.0.7; 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.2.0-dev1 Fixed in 6.0.8 Patch available CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:kamailio:kamailio:*:*:*:*:*:*:*:*——kamailio
  • cpe:2.3:a:kamailio:kamailio:*:*:*:*:*:*:*:* Versions — — ·kamailio

Remediation

  • Fix · CNA Kamailio Fixed in 6.0.8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-93962
  2. 2026-10-03 Alias added: GHSA-3jw7-c3qg-43hw

References

Exploit 1

Patch 3

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences