{"id":"CVE-2020-27507","aliases":["DEBIAN-CVE-2020-27507","DLA-3438-1","EUVD-2020-20017","GHSA-q52j-c5xj-88qf","UBUNTU-CVE-2020-27507","USN-6022-1"],"status":"published","title":"The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and...","description":"The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server or possibly have unspecified other impact.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01176,"percentile":0.67984,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2023-03-15T00:00:00Z","modified":"2026-10-26T12:02:30Z","fixes":[{"ecosystem":"Debian:12","package":"kamailio","fixed_in":["5.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"kamailio","fixed_in":["5.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"kamailio","fixed_in":["5.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"kamailio","fixed_in":["5.2.1-1+deb10u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"kamailio","fixed_in":["4.3.4-1.1ubuntu2.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"kamailio","fixed_in":["5.1.2-1ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"kamailio","fixed_in":["5.3.2-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"kamailio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"kamailio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"kamailio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"kamailio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-1+deb10u1"}]}],"versions":["5.2.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"kamailio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.4-1.1ubuntu2.1+esm1"}]}],"versions":["4.3.1-2ubuntu1","4.3.4-1.1ubuntu1","4.3.4-1.1ubuntu2","4.3.4-1.1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"kamailio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-1ubuntu2+esm1"}]}],"versions":["4.4.2-3ubuntu5","5.0.4-1ubuntu1","5.1.1-1ubuntu1","5.1.1-1ubuntu4","5.1.2-1ubuntu1","5.1.2-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"kamailio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.2-1ubuntu0.1~esm1"}]}],"versions":["5.2.3-1build3","5.2.3-1build4","5.3.0-2","5.3.1-1","5.3.2-1build1","5.3.2-1build2","5.3.2-1build3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"kamailio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.4-1.1ubuntu2.1+esm1"}]}],"versions":["4.3.1-2ubuntu1","4.3.4-1.1ubuntu1","4.3.4-1.1ubuntu2","4.3.4-1.1ubuntu2.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"kamailio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-1ubuntu2+esm1"}]}],"versions":["4.4.2-3ubuntu5","5.0.4-1ubuntu1","5.1.1-1ubuntu1","5.1.1-1ubuntu4","5.1.2-1ubuntu1","5.1.2-1ubuntu2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"kamailio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.2-1ubuntu0.1~esm1"}]}],"versions":["5.2.3-1build3","5.2.3-1build4","5.3.0-2","5.3.1-1","5.3.2-1build1","5.3.2-1build2","5.3.2-1build3"],"bundled":2}],"products":[{"vendor":"kamailio","product":"kamailio"}],"references":[{"url":"https://github.com/kamailio/kamailio/issues/2503","tags":["x_transferred","Exploit","Issue Tracking","report"]},{"url":"https://github.com/kamailio/kamailio/commit/ada3701d22b1fd579f06b4f54fa695fa988e685f","tags":["x_transferred","Patch","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00030.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27507"},{"url":"https://github.com/advisories/GHSA-q52j-c5xj-88qf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-27507","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-27507","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6022-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16657","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-27507","description":"The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server or possibly have unspecified other impact.","status":"published","published":"2023-03-15T00:00:00Z","modified":"2025-02-27T18:37:35.879Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:35:53.552996Z"}],"euvd":[{"id":"EUVD-2020-20017","description":"The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server or possibly have unspecified other impact.","status":"published","published":"2023-03-15T00:00:00Z","modified":"2025-02-27T18:37:35Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:53:21.911964Z"}],"ghsa":[{"id":"GHSA-q52j-c5xj-88qf","title":"The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and...","description":"The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server or possibly have unspecified other impact.","status":"published","published":"2023-03-15T21:30:26Z","modified":"2023-06-08T05:01:17Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:54:38.286464Z"}],"nvd":[{"id":"CVE-2020-27507","description":"The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server or possibly have unspecified other impact.","status":"published","published":"2023-03-15T20:15:10.283Z","modified":"2026-06-17T03:09:15.63Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:06:47.286386Z"}],"osv":[{"id":"CVE-2020-27507","description":"The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server or possibly have unspecified other impact.","status":"published","published":"2023-03-15T20:15:10.283Z","modified":"2026-10-20T13:59:22.31705257Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:16.248747Z"},{"id":"DEBIAN-CVE-2020-27507","description":"The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server or possibly have unspecified other impact.","status":"published","published":"2023-03-15T20:15:10.283Z","modified":"2026-10-26T12:02:30.946551688Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"UBUNTU-CVE-2020-27507","description":"The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server or possibly have unspecified other impact.","status":"published","published":"2023-03-15T20:15:00Z","modified":"2026-02-04T03:51:30.827412Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"DLA-3438-1","title":"kamailio - security update","status":"published","published":"2023-05-30T00:00:00Z","modified":"2026-03-09T01:21:03.898883Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"USN-6022-1","title":"kamailio vulnerabilities","description":"It was discovered that Kamailio did not properly sanitize SIP messages under\ncertain circumstances. An attacker could use this vulnerability to cause a\ndenial of service or possibly execute arbitrary code. This issue only affected\nUbuntu 16.04 ESM and 18.04 ESM. (CVE-2018-16657)\n\nIt was discovered that Kamailio did not properly validate INVITE requests\nunder certain circumstances. An attacker could use this vulnerability to\ncause a denial of service or possibly execute arbitrary code. (CVE-2020-27507)\n","status":"published","published":"2023-04-14T17:20:51Z","modified":"2026-06-25T13:31:59.427119934Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}