CVE-2020-27507

Katalog CVE

CVSS 9.8 · Critical EPSS 1,2%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada kamailio. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server or possibly have unspecified other impact.

Rincian

Terbit di NVD

15 Maret 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/kamailio/kamailio/commit/ada3701d22b1fd579f06b4f54fa695fa988e685f patch
• https://github.com/kamailio/kamailio/issues/2503 exploit · issue tracking
• https://lists.debian.org/debian-lts-announce/2023/05/msg00030.html