PT-2020-16995 · Kamailio+3 · Kamailio+3

Published 2020-11-18 · Updated 2025-04-07 · CVE-2020-28361

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Kamailio versions prior to 5.4.0 Sippy Softswitch versions 4.5 through 5.2

Description The issue allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the remove hf function in the Kamailio textops module. A skilled attacker with a valid credential in the system may disrupt internal call start/duration accounting mechanisms, potentially leading to a loss of revenue.

Recommendations For Kamailio versions prior to 5.4.0, update to version 5.4.0 or later to resolve the issue. For Sippy Softswitch versions 4.5 through 5.2, consider disabling the remove hf function in the Kamailio textops module as a temporary workaround until a patch is available.

Exploit

Fix

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

CVE-2020-28361

USN-7416-1

Affected Products

Kamailio

Linuxmint

Sippy Softswitch

Ubuntu

References · 17

• 🔥 https://packetstormsecurity.com/files/159030/Kamailio-5.4.0-Header-Smuggling.html · Exploit
• https://cve.org/CVERecord?id=CVE-2020-28361 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-28361 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14767 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7416-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-28361 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-28361 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-28361 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2385 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-28361 · Security Note
• https://ubuntu.com/security/notices/USN-7416-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-28361 · Vendor Advisory
• https://t.me/cvenotify/6516 · Telegram Post
• https://support.sippysoft.com/support/discussions/topics/3000179616 · Note
• https://t.me/cibsecurity/17383 · Telegram Post