Vulnerabilities

TI-2023-12678 CVE-2023-28099

OpenSIPS has vulnerability in the ds_is_in_list() function

LOW 35

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-03-15 Fixed in 3.1.9, 3.2.6 CWE-20

TI-2023-12677 CVE-2023-28098

OpenSIPS has vulnerability in the Digest Authentication Parser

LOW 35

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-03-15 Fixed in 3.1.7, 3.2.4 CWE-20

TI-2023-12676 CVE-2023-28097

OpenSIPS has vulnerability in the Content-Length Parser

MEDIUM 41

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00969 Published 2023-03-15 Fixed in 3.1.9, 3.2.6 CWE-190

TI-2023-12675 CVE-2023-28096

OpenSIPS has memory leak in cJSON lib

LOW 34

OpenSIPS, a Session Initiation Protocol (SIP) server implementation, has a memory leak starting in the 2.3 branch and priot to versions 3.1.8 and 3.2.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00767 Published 2023-03-15 Fixed in 3.1.8, 3.2.5 CWE-401

TI-2023-12674 CVE-2023-28095

OpenSIPS has vulnerability in the building the local negative replies

MEDIUM 41

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00969 Published 2023-03-15 Fixed in 3.1.7, 3.2.4 CWE-20

TI-2023-12311 CVE-2023-27601

OpenSIPS has vulnerability in the codec_delete_XX() functions

MEDIUM 41

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0099 Published 2023-03-15 Fixed in 3.1.7, 3.2.4 CWE-20

TI-2023-12310 CVE-2023-27600

OpenSIPS has vulnerability in the codec_delete_XX() functions

MEDIUM 41

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0099 Published 2023-03-15 Fixed in 3.1.7, 3.2.4 CWE-20

TI-2023-12309 CVE-2023-27599

OpenSIPS has vulnerability in the parse_to_param() function

MEDIUM 41

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00971 Published 2023-03-15 Fixed in 3.1.7, 3.2.4 CWE-20

TI-2023-12308 CVE-2023-27598

OpenSIPS has vulnerability in the parse_via() function

MEDIUM 41

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00971 Published 2023-03-15 Fixed in 3.1.7, 3.2.4 CWE-908

TI-2023-12307 CVE-2023-27597

OpenSIPS has vulnerability in the parse_uri() function

MEDIUM 40

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00738 Published 2023-03-15 Fixed in 3.1.8, 3.2.5 CWE-20

TI-2023-12306 CVE-2023-27596

OpenSIPS has vulnerability in the codec_delete_XX() functions

MEDIUM 40

OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00738 Published 2023-03-15 Fixed in 3.1.8, 3.2.5 CWE-770

TI-2013-03243 CVE-2013-3722 · GHSA-gf9x-6xqh-g38j

A Denial of Service (infinite loop) exists in OpenSIPS before 1.10 in lookup.c.

LOW 35

A Denial of Service (infinite loop) exists in OpenSIPS before 1.10 in lookup.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01106 Published 2020-02-17 No fix listed CWE-835

Vulnerabilities

Filters