PT-2023-21239 · Opensips · Opensis

Alfred Farrugia + 1 · Published 2023-03-15 · Updated 2023-03-21 · CVE-2023-27599

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenSIPS versions prior to 3.1.7 and 3.2.4

Description OpenSIPS is a Session Initiation Protocol (SIP) server implementation. When the function append hf handles a SIP message with a malformed To header, a call to the function abort() is performed, resulting in a crash. This is due to the check in data lump.c:399 in the function anchor lump. An attacker abusing this issue will crash OpenSIPS leading to Denial of Service. It affects configurations containing functions that make use of the affected code, such as the function append hf.

Recommendations For versions prior to 3.1.7, update to version 3.1.7 or later. For versions prior to 3.2.4, update to version 3.2.4 or later. As a temporary workaround, consider disabling the append hf function until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2023-27599

GHSA-QVJ2-VQRG-F5JX

Affected Products

Opensis

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/27xxx/CVE-2023-27599.json · Exploit
• https://github.com/OpenSIPS/opensips/commit/cb56694d290530ac308f44b453c18120b1c1109d · Patch
• https://cve.org/CVERecord?id=CVE-2023-27599 · Security Note
• https://osv.dev/vulnerability/CVE-2023-27599 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-27599 · Security Note
• https://ubuntu.com/security/CVE-2023-27599 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-27599 · Vendor Advisory
• https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qvj2-vqrg-f5jx · Note
• https://t.me/cibsecurity/60098 · Telegram Post
• https://t.me/cvenotify/46267 · Telegram Post
• https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf · Note