These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
OpenSIPS, a Session Initiation Protocol (SIP) server implementation, is affected by a denial of service vulnerability in its SDP bandwidth-line parsing logic. The vulnerability occurs in versions prior to 3.6.6 and 4.0.0-rc1. An unauthenticated remote attacker can trigger a crash in any configuration whose routing script parses attacker-controlled SDP and applies dialog/QoS processing by sending a SIP req [truncated]
A remote attacker can crash an OpenSIPS worker in deployments that expose handle_subscribe() and allow watcherinfo (presence.winfo) generation due to a denial of service vulnerability in the watcherinfo generation functionality. This issue arises when an attacker sends a SUBSCRIBE Event: presence request with a long From URI, creating an oversized watcher entry, and then triggers presence.winfo watcherinf [truncated]
OpenSIPS, a Session Initiation Protocol (SIP) server implementation, has a vulnerability in versions prior to 3.6.6 and 4.0.0-rc1. The find_line_delimiter() function in the multipart body parser performs an out-of-bounds read via strncmp() when searching for MIME boundary delimiters. This occurs when a SIP message has a Content-Type: multipart/mixed with a boundary parameter and its body contains -- withi [truncated]
The OpenSIPS server implementation has a buffer overflow vulnerability in the construct_uri() function, which can be exploited by an attacker-controlled username to corrupt adjacent global data. This issue affects OpenSIPS versions prior to 3.6.6 and 4.0.0-rc1. The vulnerability has a CVSS score of 9.1 and is considered CRITICAL. OpenSIPS users and administrators should be aware of this vulnerability and [truncated]
OpenSIPS, a Session Initiation Protocol (SIP) server implementation, has a vulnerability in versions prior to 3.6.6 and 4.0.0-rc1. The TCP message framing layer improperly parses the Content-Length header using unsigned int arithmetic with no overflow check. An attacker can send a Content-Length value that overflows unsigned int (e.g., 4294967296), causing the framing layer to compute a wrapped-around val [truncated]
A buffer overflow vulnerability exists in OpenSIPS, a Session Initiation Protocol (SIP) server implementation, in versions 3.4.0-beta through 3.6.5 and 4.0.0-beta. The vulnerability is due to a size check in the {s.b64encode} string transformation that does not account for the expansion of base64 encoding, leading to a buffer overflow when processing large input. A remote attacker can exploit this by send [truncated]
A critical vulnerability in OpenSIPS, a Session Initiation Protocol (SIP) server implementation, can cause a stack buffer overflow when processing SIP messages with header names longer than 255 bytes. This issue affects OpenSIPS versions 4.0.0 and prior. A single unauthenticated UDP packet to the SIP port (5060) can crash the process or, on builds without stack protections, potentially allow remote code e [truncated]
CVE-2026-25554 is a SQL injection vulnerability in OpenSIPS versions 3.1 before 3.6.4. The auth_jwt module is affected when db_mode is enabled and a SQL database backend is used. The vulnerability allows an attacker to manipulate the query result and bypass JWT authentication, enabling impersonation of arbitrary identities. This could lead to unauthorized access and potential data breaches. OpenSIPS users [truncated]