CVE-2023-27599

High

Description

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, when the function `append_hf` handles a SIP message with a malformed To header, a call to the function `abort()` is performed, resulting in a crash. This is due to the following check in `data_lump.c:399` in the function `anchor_lump`. An attacker abusing this vulnerability will crash OpenSIPS leading to Denial of Service. It affects configurations containing functions that make use of the affected code, such as the function `append_hf`. This issue has been fixed in versions 3.1.7 and 3.2.4.

SeverityHigh

CVSS7.5

Exploit probability—

ProductOpensips

PublishedMar 15, 2023

First seenMar 15, 2023

Weakness typeCWE-20Improper input validation

How to fix

Update

opensips opensips3.1.7, 3.2.4 or later

Affected products

Product	Affected versions	Fixed in
opensips opensips	v < 3.1.7, 3.2.0 ≤ v < 3.2.4	3.1.7, 3.2.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.