Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

opensips — Vulnerabilities & Security Advisories 20

All 20 CVE vulnerabilities found in opensips, with AI-generated Chinese analysis, references, and POCs.

This page presents the vulnerability aggregation data for the OpenSIPS SIP proxy server, specifically categorized under weakness types such as input validation errors and buffer overflows. It collects detailed records of security flaws discovered in this open-source communication platform, covering the period from 2010 through 2024. By accessing this comprehensive repository, users can efficiently track vendor advisories issued by the OpenSIPS team to understand the current security posture. Furthermore, it allows security professionals to analyze the evolution of specific weakness classes within the software ecosystem over time. Readers can also look up the complete vulnerability history of the product to identify recurring patterns or persistent issues in older versions. This resource serves as a critical reference for system administrators and developers responsible for maintaining secure VoIP infrastructures. The data includes descriptions of technical impacts, affected modules, and recommended remediation strategies. Understanding these historical data points helps teams prioritize patching efforts and harden their deployment configurations against known attack vectors. The aggregation avoids redundant noise by consolidating multiple sources into a single view, ensuring that relevant information is easily accessible. This approach supports informed decision-making regarding software updates and long-term maintenance schedules. By providing a structured overview, the page facilitates quicker incident response and reduces the time required to assess risk exposure. Ultimately, it empowers organizations to maintain compliance and enhance the overall resilience of their communication networks against evolving cyber threats.

Vendor: OpenSIPS

CVE ID Title CVSS Severity Published
CVE-2026-46334 OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS SDP cloning CWE-476 8.7 High 2026-08-04
CVE-2026-45809 OpenSIPS: Denial of Service in watcherinfo XML generation from oversized watcher URI CWE-121 8.7 High 2026-08-04
CVE-2026-45705 OpenSIPS: OOB Read in Multipart Body Boundary Parsing CWE-125 5.3 Medium 2026-08-04
CVE-2026-45537 OpenSIPS: Global Buffer Overflow in construct_uri CWE-120 9.1 Critical 2026-08-04
CVE-2026-45103 OpenSIPS: SIP Message Smuggling via TCP Content-Length Integer Overflow CWE-190 7.5 High 2026-08-04
CVE-2026-45100 OpenSIPS: Buffer Overflow in Base64 Encode Transformation CWE-120 9.1 Critical 2026-08-04
CVE-2026-45084 OpenSIPS: Denial of service in presence.handle_publish() from unchecked Content-Type state CWE-476 8.7 High 2026-08-04
CVE-2026-45538 OpenSIPS: Stack Buffer Overflow in sip_to_json() Header Name Copy CWE-121 9.8 Critical 2026-08-04
CVE-2026-25554 OpenSIPS 3.1 <= 3.6.4 auth_jwt SQL Injection Enables JWT Authentication Bypass CWE-89 6.5 Medium 2026-02-25
CVE-2023-28099 OpenSIPS has vulnerability in the ds_is_in_list() function CWE-20 5.9 Medium 2023-03-15
CVE-2023-28098 OpenSIPS has vulnerability in the Digest Authentication Parser CWE-20 5.9 Medium 2023-03-15
CVE-2023-28097 OpenSIPS has vulnerability in the Content-Length Parser CWE-190 7.5 High 2023-03-15
CVE-2023-28096 OpenSIPS has memory leak in cJSON lib CWE-401 4.5 Medium 2023-03-15
CVE-2023-28095 OpenSIPS has vulnerability in the building the local negative replies CWE-20 7.5 High 2023-03-15
CVE-2023-27601 OpenSIPS has vulnerability in the codec_delete_XX() functions CWE-20 7.5 High 2023-03-15
CVE-2023-27600 OpenSIPS has vulnerability in the codec_delete_XX() functions CWE-20 7.5 High 2023-03-15
CVE-2023-27599 OpenSIPS has vulnerability in the parse_to_param() function CWE-20 7.5 High 2023-03-15
CVE-2023-27598 OpenSIPS has vulnerability in the parse_via() function CWE-908 7.5 High 2023-03-15
CVE-2023-27597 OpenSIPS has vulnerability in the parse_uri() function CWE-20 7.5 High 2023-03-15
CVE-2023-27596 OpenSIPS has vulnerability in the codec_delete_XX() functions CWE-770 7.5 High 2023-03-15

All 20 known CVE vulnerabilities affecting opensips with full Chinese analysis, references, and POCs where available.