Kamailio vulnerabilities

Products

• Kamailio 20

Newest

• kamailio Kamailio sipt ss7_parser.c isup_get_calling_party buffer overflow CVE-2026-108822 Fix available 6.9 MediumOctober 12, 2026
• kamailio Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-based overflow CVE-2026-93962 Fix available 6.9 MediumSeptember 20, 2026
• kamailio An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via... CVE-2026-52023 Fix available 7.5 HighSeptember 1, 2026
• kamailio An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via... CVE-2026-52022 Fix available 7.5 HighSeptember 1, 2026
• kamailio Kamailio AVP cxdx_avp.c get_4bytes out-of-bounds CVE-2026-82608 Fix available 5.3 MediumAugust 31, 2026
• kamailio Kamailio Auth: Processing Vulnerability For Additional Authenticated User Identity Checks CVE-2026-39864 Fix available 4.4 MediumApril 8, 2026
• kamailio Kamailio Core: TCP Data Processing Vulnerability CVE-2026-39863 Fix available 7.5 HighApril 8, 2026
• kamailio Kamailio Grammar Rule cfg.y yyerror_at null pointer dereference CVE-2025-12207 Disputed 4.8 MediumOctober 27, 2025
• kamailio Kamailio rvalue.c rve_is_constant null pointer dereference CVE-2025-12206 Disputed 4.8 MediumOctober 27, 2025
• kamailio Kamailio Configuration File cfg.lex sr_push_yy_state use after free CVE-2025-12205 Disputed 4.8 MediumOctober 27, 2025
• kamailio Kamailio Configuration File rvalue.c rve_destroy heap-based overflow CVE-2025-12204 Disputed 4.8 MediumOctober 27, 2025
• kamailio The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and... CVE-2020-27507 Fix available 9.8 CriticalMarch 15, 2023
• kamailio Kamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2... CVE-2020-28361 Fix available 5.4 MediumNovember 18, 2020
• kamailio, debian linux +1 more In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header... CVE-2018-16657 Fix available 9.8 CriticalSeptember 7, 2018
• kamailio, debian linux +1 more In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header... CVE-2018-14767 Fix available EPSS 29.3% 9.8 CriticalJuly 31, 2018
• kamailio, debian linux +1 more A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x... CVE-2018-8828 Fix available EPSS 30.4% 9.8 CriticalMarch 20, 2018
• kamailio The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp... CVE-2015-1590 Fix available 7.8 HighSeptember 7, 2017
• kamailio Insecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1. CVE-2013-7426 Fix available 9.8 CriticalAugust 29, 2017
• kamailio The kamailio build in kamailio before 4.2.0-2 process allows local users to gain privileges. CVE-2015-1591 Fix available 7.8 HighJune 27, 2017
• kamailio, debian linux +1 more Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in... CVE-2016-2385 Public exploitFix available EPSS 29.2% 9.8 CriticalMarch 29, 2016