CyberRota Analysis
AI-GeneratedOpenSIPS versions prior to 3.6.6 and 4.0.0-rc1 are vulnerable to a denial of service attack due to improper parsing of malformed SDP bandwidth lines, which can lead to crashes of the OpenSIPS worker process. An unauthenticated remote attacker can exploit this vulnerability by sending specially crafted SIP requests, affecting any deployment that processes SDP in its routing scripts. Organizations using affected versions should prioritize upgrading to the patched releases to mitigate potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the SDP bandwidth-line parsing logic. A SIP request with Content-Type: application/sdp and a malformed session-level SDP bandwidth line missing the required colon delimiter can corrupt parsed SDP bandwidth metadata. When a route or module subsequently clones the corrupted SDP state, as occurs with dialog and QoS processing, the OpenSIPS worker process crashes. An unauthenticated remote attacker can therefore trigger a crash in any configuration whose routing script parses attacker-controlled SDP and applies dialog/QoS processing. This issue has been fixed in versions 3.6.6 and 4.0.0-rc1.