Buffer overflow in Kamailio sipt module ISUP parser
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Kamailio up to and including 6.0.7 and 6.1.3 is affected. A manipulated length argument in the isup_get_calling_party function of the sipt module causes a buffer overflow (CWE-120). A remote attacker without privileges or user interaction can trigger it, which affects availability.
Written with Claude Haiku 5.5 from the sources below · 2026-10-29
Description from the CNA
A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party of the file src/modules/sipt/ss7_parser.c of the component sipt Module. The manipulation of the argument length results in buffer overflow. The attack may be performed from remote. Upgrading to version 6.0.8 and 6.1.4 is sufficient to fix this issue. The patch is identified as 3667bebf8d0bea07ed16218fd921d07db87aeb21. Upgrading the affected component is advised.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Kamailio | 6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; 6.0.6; 6.0.7; 6.1.0; 6.1.1; 6.1.2; 6.1.3 | 6.0.8, 6.1.4 | Patch available | CNA |
- Kamailio Vendor— Affected 6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; 6.0.6; 6.0.7; 6.1.0; 6.1.1; 6.1.2; 6.1.3 Fixed in 6.0.8, 6.1.4 Patch available CNA
Remediation
Upgrade to version 6.0.8 or 6.1.4, matching the installed branch. The fix is patch 3667bebf8d0bea07ed16218fd921d07db87aeb21.
Written with Claude Haiku 5.5 from the sources below · 2026-10-29
- Fix · CNA Kamailio Fixed in 6.0.8, 6.1.4
Timeline
- 2026-10-12 Threatist record created from CVE-2026-108822
- 2026-10-12 Alias added: GHSA-8639-687x-5rvv
- 2026-10-12 Priority changed: MEDIUM → LOW
- 2026-10-15 CISA SSVC decision points changed
- 2026-10-25 EPSS moved to the below the 50th percentile
References
Sources
- CVE-2026-108822 · CVE Program
- CVE-2026-108822 · NVD
- FIRST EPSS
- GHSA-8639-687x-5rvv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences