kamailio kayıtları
kamailio üreticisine ait 17 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %76,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer4
- CWE-404 Improper Resource Shutdown or Release2
- CWE-264 Permissions, Privileges, and Access Controls2
- CWE-193 Off-by-one Error1
- CWE-20 Improper Input Validation1
- CWE-400 Uncontrolled Resource Consumption1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
17 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
48Planlayın | CVE-2018-8828İstismar yok | A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2.kamailio · kamailio · CWE-193 | Kritik9,8 | — | %30,4 | 20 Mar 2018 |
48Planlayın | CVE-2018-14767İstismar yok | In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentationkamailio · kamailio · CWE-20 | Kritik9,8 | — | %29,3 | 31 Tem 2018 |
48Planlayın | CVE-2016-2385Kavram kanıtı | Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5kamailio · kamailio · CWE-119 | Kritik9,8 | — | %29,2 | 11 Nis 2016 |
40Planlayın | CVE-2018-16657İstismar yok | In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kakamailio · kamailio · CWE-476 | Kritik9,8 | — | %3,5 | 7 Eyl 2018 |
40Planlayın | CVE-2013-7426İstismar yok | Insecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1.kamailio · kamailio · CWE-434 | Kritik9,8 | — | %2,1 | 29 Ağu 2017 |
39İzleyin | CVE-2020-27507İstismar yok | The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow thatkamailio · kamailio · CWE-120 | Kritik9,8 | — | %1,1 | 15 Mar 2023 |
31İzleyin | CVE-2015-1590İstismar yok | The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailio_ctl.kamailio · kamailio · CWE-264 | Yüksek7,8 | — | %0,4 | 7 Eyl 2017 |
31İzleyin | CVE-2015-1591İstismar yok | The kamailio build in kamailio before 4.2.0-2 process allows local users to gain privileges.kamailio · kamailio · CWE-264 | Yüksek7,8 | — | %0,3 | 27 Haz 2017 |
30İzleyin | CVE-2026-52022İstismar yok | An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling compokamailio · kamailio · CWE-400 | Yüksek7,5 | — | %0,5 | 1 Eyl 2026 |
30İzleyin | CVE-2026-39863İstismar yok | Kamailio Core: TCP Data Processing Vulnerabilitykamailio · kamailio · CWE-119 | Yüksek7,5 | — | %0,4 | 8 Nis 2026 |
30İzleyin | CVE-2026-52023İstismar yok | An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the ims_registrar_pcscf module, specificalkamailio · kamailio · CWE-415 | Yüksek7,5 | — | %0,4 | 1 Eyl 2026 |
21İzleyin | CVE-2020-28361İstismar yok | Kamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a headkamailio · kamailio · CWE-444 | Orta5,4 | — | %1,1 | 18 Kas 2020 |
19İzleyin | CVE-2026-39864İstismar yok | Kamailio Auth: Processing Vulnerability For Additional Authenticated User Identity Checkskamailio · kamailio · CWE-125 | Orta4,9 | — | %0,3 | 8 Nis 2026 |
7İzleyin | CVE-2025-12204İstismar yok | Kamailio Configuration File rvalue.c rve_destroy heap-based overflowkamailio · kamailio · CWE-119 | Düşük1,9 | — | %0,2 | 27 Eki 2025 |
7İzleyin | CVE-2025-12206İstismar yok | Kamailio rvalue.c rve_is_constant null pointer dereferencekamailio · kamailio · CWE-404 | Düşük1,9 | — | %0,2 | 27 Eki 2025 |
7İzleyin | CVE-2025-12207İstismar yok | Kamailio Grammar Rule cfg.y yyerror_at null pointer dereferencekamailio · kamailio · CWE-404 | Düşük1,9 | — | %0,2 | 27 Eki 2025 |
7İzleyin | CVE-2025-12205İstismar yok | Kamailio Configuration File cfg.lex sr_push_yy_state use after freekamailio · kamailio · CWE-119 | Düşük1,9 | — | %0,2 | 27 Eki 2025 |
- CVE-2018-882848Planlayın
A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2.
KritikCVSS 9,8İstismar yokEPSS %30kamailio · kamailio20 Mar 2018
- CVE-2018-1476748Planlayın
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation
KritikCVSS 9,8İstismar yokEPSS %29kamailio · kamailio31 Tem 2018
- CVE-2016-238548Planlayın
Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5
KritikCVSS 9,8Kavram kanıtıEPSS %29kamailio · kamailio11 Nis 2016
- CVE-2018-1665740Planlayın
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Ka
KritikCVSS 9,8İstismar yokEPSS %3kamailio · kamailio7 Eyl 2018
- CVE-2013-742640Planlayın
Insecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1.
KritikCVSS 9,8İstismar yokEPSS %2kamailio · kamailio29 Ağu 2017
- CVE-2020-2750739İzleyin
The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that
KritikCVSS 9,8İstismar yokEPSS %1kamailio · kamailio15 Mar 2023
- CVE-2015-159031İzleyin
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailio_ctl.
YüksekCVSS 7,8İstismar yokEPSS %0kamailio · kamailio7 Eyl 2017
- CVE-2015-159131İzleyin
The kamailio build in kamailio before 4.2.0-2 process allows local users to gain privileges.
YüksekCVSS 7,8İstismar yokEPSS %0kamailio · kamailio27 Haz 2017
- CVE-2026-5202230İzleyin
An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling compo
YüksekCVSS 7,5İstismar yokEPSS %0kamailio · kamailio1 Eyl 2026
- CVE-2026-3986330İzleyin
Kamailio Core: TCP Data Processing Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0kamailio · kamailio8 Nis 2026
- CVE-2026-5202330İzleyin
An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the ims_registrar_pcscf module, specifical
YüksekCVSS 7,5İstismar yokEPSS %0kamailio · kamailio1 Eyl 2026
- CVE-2020-2836121İzleyin
Kamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a head
OrtaCVSS 5,4İstismar yokEPSS %1kamailio · kamailio18 Kas 2020
- CVE-2026-3986419İzleyin
Kamailio Auth: Processing Vulnerability For Additional Authenticated User Identity Checks
OrtaCVSS 4,9İstismar yokEPSS %0kamailio · kamailio8 Nis 2026
- CVE-2025-122047İzleyin
Kamailio Configuration File rvalue.c rve_destroy heap-based overflow
DüşükCVSS 1,9İstismar yokEPSS %0kamailio · kamailio27 Eki 2025
- CVE-2025-122067İzleyin
Kamailio rvalue.c rve_is_constant null pointer dereference
DüşükCVSS 1,9İstismar yokEPSS %0kamailio · kamailio27 Eki 2025
- CVE-2025-122077İzleyin
Kamailio Grammar Rule cfg.y yyerror_at null pointer dereference
DüşükCVSS 1,9İstismar yokEPSS %0kamailio · kamailio27 Eki 2025
- CVE-2025-122057İzleyin
Kamailio Configuration File cfg.lex sr_push_yy_state use after free
DüşükCVSS 1,9İstismar yokEPSS %0kamailio · kamailio27 Eki 2025