Skip to content
OpenAdvisories

Vendor

OpenSIPS

20 known vulnerabilities.

Products

OpenSIPS 20
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-45537

    OpenSIPS: Global Buffer Overflow in construct_uri

    OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the construct_uri() function concatenates multiple URI components (protocol, username, domain, port, params) into a fixed 1024-byte global BSS buf…

    OpenSIPS OpenSIPS opensips Ubuntu
  • Critical 9.1
    CVE-2026-45100

    OpenSIPS: Buffer Overflow in Base64 Encode Transformation

    OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions 3.4.0-beta through 3.6.5 and 4.0.0-beta contain a buffer overflow in the {s.b64encode} string transformation. The size check for {s.b64encode} only verifies that the input fits wi…

    OpenSIPS OpenSIPS opensips Ubuntu
  • Critical 9.8
    CVE-2026-45538

    OpenSIPS: Stack Buffer Overflow in sip_to_json() Header Name Copy

    OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions 4.0.0 and prior, processing a SIP message with a header name longer than 255 bytes causes a stack buffer overflow when sip_to_json() is called in the routing script. Function s…

    OpenSIPS OpenSIPS opensips Ubuntu