CVE-2023-27598— OpenSIPS has vulnerability in the parse_via() function
Quick assessment
Affected
OpenSIPS opensips
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
OpenSIPS是OpenSIPS 个人开发者的一个 GPL 许可的 SIP 服务器实现。 OpenSIPS 3.2版本及之前版本存在安全漏洞，该漏洞源于发送格式错误的“Via”标头会在调用“calc_tag_suffix”函数时触发分段错误，从而导致系统崩溃和拒绝服务。
Possible ATT&CK Techniques 2 AI
T1190 · Exploit Public-Facing Application T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-27598
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenSIPS has vulnerability in the parse_via() function
Source: CVE Program / CVE List V5
Vulnerability Description
OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, sending a malformed `Via` header to OpenSIPS triggers a segmentation fault when the function `calc_tag_suffix` is called. A specially crafted `Via` header, which is deemed correct by the parser, will pass uninitialized strings to the function `MD5StringArray` which leads to the crash. Abuse of this vulnerability leads to Denial of Service due to a crash. Since the uninitialized string points to memory location `0x0`, no further exploitation appears to be possible. No special network privileges are required to perform this attack, as long as the OpenSIPS configuration makes use of functions such as `sl_send_reply` or `sl_gen_totag` that trigger the vulnerable code. This issue has been fixed in versions 3.1.7 and 3.2.4.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对未经初始化资源的使用
Source: CVE Program / CVE List V5
Vulnerability Title
OpenSIPS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenSIPS是OpenSIPS 个人开发者的一个 GPL 许可的 SIP 服务器实现。 OpenSIPS 3.2版本及之前版本存在安全漏洞，该漏洞源于发送格式错误的“Via”标头会在调用“calc_tag_suffix”函数时触发分段错误，从而导致系统崩溃和拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-27598
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-27598
请登录查看更多情报信息。
Patches & Fixes for CVE-2023-27598 (1)
Vendor Advisories for CVE-2023-27598 (1)
-
https://github.com/OpenSIPS/opensips/security/advisories/GHSA-wxfg-3gwh-rhvx x_refsource_CONFIRM
Other References for CVE-2023-27598 (1)
Same Patch Batch · OpenSIPS · 2023-03-15 · 11 CVEs total
| CVE-2023-27596 | 7.5 HIGH | OpenSIPS has vulnerability in the codec_delete_XX() functions |
| CVE-2023-27597 | 7.5 HIGH | OpenSIPS has vulnerability in the parse_uri() function |
| CVE-2023-27599 | 7.5 HIGH | OpenSIPS has vulnerability in the parse_to_param() function |
| CVE-2023-27600 | 7.5 HIGH | OpenSIPS has vulnerability in the codec_delete_XX() functions |
| CVE-2023-27601 | 7.5 HIGH | OpenSIPS has vulnerability in the codec_delete_XX() functions |
| CVE-2023-28095 | 7.5 HIGH | OpenSIPS has vulnerability in the building the local negative replies |
| CVE-2023-28097 | 7.5 HIGH | OpenSIPS has vulnerability in the Content-Length Parser |
| CVE-2023-28098 | 5.9 MEDIUM | OpenSIPS has vulnerability in the Digest Authentication Parser |
| CVE-2023-28099 | 5.9 MEDIUM | OpenSIPS has vulnerability in the ds_is_in_list() function |
| CVE-2023-28096 | 4.5 MEDIUM | OpenSIPS has memory leak in cJSON lib |
IV. Related Vulnerabilities
Same product: opensips
-
CVE-2026-46334
OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS -
CVE-2026-45809
OpenSIPS: Denial of Service in watcherinfo XML generation fr -
CVE-2026-45705
OpenSIPS: OOB Read in Multipart Body Boundary Parsing -
CVE-2026-45537
OpenSIPS: Global Buffer Overflow in construct_uri -
CVE-2026-45103
OpenSIPS: SIP Message Smuggling via TCP Content-Length Integ
Same vendor: OpenSIPS
-
CVE-2026-46334
OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS -
CVE-2026-45809
OpenSIPS: Denial of Service in watcherinfo XML generation fr -
CVE-2026-45705
OpenSIPS: OOB Read in Multipart Body Boundary Parsing -
CVE-2026-45537
OpenSIPS: Global Buffer Overflow in construct_uri -
CVE-2026-45103
OpenSIPS: SIP Message Smuggling via TCP Content-Length Integ
Same weakness: CWE-908
-
CVE-2026-102187
Windows Kernel Information Disclosure Vulnerability -
CVE-2026-97011
Microsoft Office Excel Remote Code Execution Vulnerability -
CVE-2026-96850
Windows Modern Device Management (MDM) Information Disclosur -
CVE-2026-96206
Windows Subsystem for Linux Information Disclosure Vulnerabi -
CVE-2026-83925
Windows Kernel Information Disclosure Vulnerability
V. Comments for CVE-2023-27598
No comments yet