OpenSIPS / Opensips
20 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-46334 | OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS SDP cloning | HIGH | 8.7 | Aug 4, 2026 |
| CVE-2026-45809 | OpenSIPS: Denial of Service in watcherinfo XML generation from oversized watcher URI | HIGH | 8.7 | Aug 4, 2026 |
| CVE-2026-45705 | OpenSIPS: OOB Read in Multipart Body Boundary Parsing | MEDIUM | 5.3 | Aug 4, 2026 |
| CVE-2026-45537 | OpenSIPS: Global Buffer Overflow in construct_uri | CRITICAL | 9.1 | Aug 4, 2026 |
| CVE-2026-45103 | OpenSIPS: SIP Message Smuggling via TCP Content-Length Integer Overflow | HIGH | 7.5 | Aug 4, 2026 |
| CVE-2026-45100 | OpenSIPS: Buffer Overflow in Base64 Encode Transformation | CRITICAL | 9.1 | Aug 4, 2026 |
| CVE-2026-45084 | OpenSIPS: Denial of service in presence.handle_publish() from unchecked Content-Type state | HIGH | 8.7 | Aug 4, 2026 |
| CVE-2026-45538 | OpenSIPS: Stack Buffer Overflow in sip_to_json() Header Name Copy | CRITICAL | 9.8 | Aug 4, 2026 |
| CVE-2026-25554 | OpenSIPS 3.1 <= 3.6.4 auth_jwt SQL Injection Enables JWT Authentication Bypass | HIGH | 8.3 | Feb 25, 2026 |
| CVE-2023-28099 | OpenSIPS has vulnerability in the ds_is_in_list() function | HIGH | 7.5 | Mar 15, 2023 |
| CVE-2023-28098 | OpenSIPS has vulnerability in the Digest Authentication Parser | HIGH | 7.5 | Mar 15, 2023 |
| CVE-2023-28097 | OpenSIPS has vulnerability in the Content-Length Parser | HIGH | 7.5 | Mar 15, 2023 |
| CVE-2023-28096 | OpenSIPS has memory leak in cJSON lib | HIGH | 7.5 | Mar 15, 2023 |
| CVE-2023-28095 | OpenSIPS has vulnerability in the building the local negative replies | HIGH | 7.5 | Mar 15, 2023 |
| CVE-2023-27601 | OpenSIPS has vulnerability in the codec_delete_XX() functions | HIGH | 7.5 | Mar 15, 2023 |
| CVE-2023-27600 | OpenSIPS has vulnerability in the codec_delete_XX() functions | HIGH | 7.5 | Mar 15, 2023 |
| CVE-2023-27599 | OpenSIPS has vulnerability in the parse_to_param() function | HIGH | 7.5 | Mar 15, 2023 |
| CVE-2023-27598 | OpenSIPS has vulnerability in the parse_via() function | HIGH | 7.5 | Mar 15, 2023 |
| CVE-2023-27597 | OpenSIPS has vulnerability in the parse_uri() function | HIGH | 7.5 | Mar 15, 2023 |
| CVE-2023-27596 | OpenSIPS has vulnerability in the codec_delete_XX() functions | HIGH | 7.5 | Mar 15, 2023 |
| CVE-2013-3722 | A Denial of Service (infinite loop) exists in OpenSIPS before 1.10 in lookup.c. | HIGH | 7.5 | Feb 17, 2020 |
Showing 1 to 20 of 20 CVEs