Opensips vulnerabilities

Products

• Opensips 22

Newest

• opensips OpenSIPS rtpproxy rtpproxy_answer out-of-bounds CVE-2026-110679 6.9 MediumOctober 14, 2026
• opensips OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS SDP cloning CVE-2026-46334 8.7 HighAugust 4, 2026
• opensips OpenSIPS: Denial of Service in watcherinfo XML generation from oversized watcher URI CVE-2026-45809 8.7 HighAugust 4, 2026
• opensips OpenSIPS: OOB Read in Multipart Body Boundary Parsing CVE-2026-45705 5.3 MediumAugust 4, 2026
• opensips OpenSIPS: Global Buffer Overflow in construct_uri CVE-2026-45537 9.1 CriticalAugust 4, 2026
• opensips OpenSIPS: SIP Message Smuggling via TCP Content-Length Integer Overflow CVE-2026-45103 7.5 HighAugust 4, 2026
• opensips OpenSIPS: Buffer Overflow in Base64 Encode Transformation CVE-2026-45100 9.1 CriticalAugust 4, 2026
• opensips OpenSIPS: Denial of service in presence.handle_publish() from unchecked Content-Type state CVE-2026-45084 8.7 HighAugust 4, 2026
• opensips OpenSIPS: Stack Buffer Overflow in sip_to_json() Header Name Copy CVE-2026-45538 9.8 CriticalAugust 4, 2026
• opensips OpenSIPS 3.1 <= 3.6.4 auth_jwt SQL Injection Enables JWT Authentication Bypass CVE-2026-25554 8.3 HighFebruary 25, 2026
• opensips OpenSIPS has vulnerability in the ds_is_in_list() function CVE-2023-28099 5.9 MediumMarch 15, 2023
• opensips OpenSIPS has vulnerability in the Digest Authentication Parser CVE-2023-28098 5.9 MediumMarch 15, 2023
• opensips OpenSIPS has vulnerability in the Content-Length Parser CVE-2023-28097 7.5 HighMarch 15, 2023
• opensips OpenSIPS has memory leak in cJSON lib CVE-2023-28096 4.5 MediumMarch 15, 2023
• opensips OpenSIPS has vulnerability in the building the local negative replies CVE-2023-28095 7.5 HighMarch 15, 2023
• opensips OpenSIPS has vulnerability in the codec_delete_XX() functions CVE-2023-27601 7.5 HighMarch 15, 2023
• opensips OpenSIPS has vulnerability in the codec_delete_XX() functions CVE-2023-27600 7.5 HighMarch 15, 2023
• opensips OpenSIPS has vulnerability in the parse_to_param() function CVE-2023-27599 7.5 HighMarch 15, 2023
• opensips OpenSIPS has vulnerability in the parse_via() function CVE-2023-27598 7.5 HighMarch 15, 2023
• opensips OpenSIPS has vulnerability in the parse_uri() function CVE-2023-27597 7.5 HighMarch 15, 2023
• opensips OpenSIPS has vulnerability in the codec_delete_XX() functions CVE-2023-27596 7.5 HighMarch 15, 2023
• opensips A Denial of Service (infinite loop) exists in OpenSIPS before 1.10 in lookup.c. CVE-2013-3722 7.5 HighFebruary 17, 2020