Logo
componentkamailio
Name
kamailio
Version
6.0.1-r2
Type
library
Description
-
Licenses
-
PURL
-
CPE
cpe:2.3:a:kamailio:kamailio:6.0.1:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
openwrt-25.12
6.0.1-r2

Patches#


#
Title
Author
Resolve
1
Patch #1
Unknown
2
Patch #2
Unknown
3
Patch #3
Unknown
4
Patch #4
Unknown
5
Patch #5
Unknown

Vulnerabilities#


Name
Analysis
Description
Exploitable
Kamailio is an open source implementation of a SIP Signaling Server. Prior to 6.0.5 and 5.8.7, an out-of-bounds read in the auth module of Kamailio (formerly OpenSER and SER) allows remote attackers to cause a denial of service (process crash) via a specially crafted SIP packet if a successful user authentication without a database backend is followed by additional user identity checks. This vulnerability is fixed in 6.0.5 and 5.8.7.
Exploitable
Kamailio is an open source implementation of a SIP Signaling Server. Prior to 6.1.1, 6.0.6, and 5.8.8, an out-of-bounds access in the core of Kamailio (formerly OpenSER and SER) allows remote attackers to cause a denial of service (process crash) via a specially crafted data packet sent over TCP. The issue impacts Kamailio instances having TCP or TLS listeners. This vulnerability is fixed in 5.1.1, 6.0.6, and 5.8.8.