CVE-2023-27599 - Vulnerability Details - OpenCVE

ReportizFlow

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, when the function `append_hf` handles a SIP message with a malformed To header, a call to the function `abort()` is performed, resulting in a crash. This is due to the following check in `data_lump.c:399` in the function `anchor_lump`. An attacker abusing this vulnerability will crash OpenSIPS leading to Denial of Service. It affects configurations containing functions that make use of the affected code, such as the function `append_hf`. This issue has been fixed in versions 3.1.7 and 3.2.4.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Opensips	Opensips

Configuration 1 [-]

OR	cpe:2.3:a:opensips:opensips::::::::
	cpe:2.3:a:opensips:opensips::::::::

No data.

References

Link	Providers
https://github.com/OpenSIPS/opensips/commit/cb56694d290530ac308f44b453c18120b1c1109d
https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qvj2-vqrg-f5jx
https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-03-15T20:58:06.736Z

Updated: 2024-08-02T12:16:35.869Z

Reserved: 2023-03-04T01:03:53.637Z

Link: CVE-2023-27599

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-03-15T21:15:09.247

Modified: 2024-11-21T07:53:14.060

Link: CVE-2023-27599

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-27599", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2023-03-04T01:03:53.637Z", "datePublished": "2023-03-15T20:58:06.736Z", "dateUpdated": "2024-08-02T12:16:35.869Z"}, "containers": {"cna": {"title": "OpenSIPS has vulnerability in the parse_to_param() function", "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "lang": "en", "description": "CWE-20: Improper Input Validation", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qvj2-vqrg-f5jx", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qvj2-vqrg-f5jx"}, {"name": "https://github.com/OpenSIPS/opensips/commit/cb56694d290530ac308f44b453c18120b1c1109d", "tags": ["x_refsource_MISC"], "url": "https://github.com/OpenSIPS/opensips/commit/cb56694d290530ac308f44b453c18120b1c1109d"}, {"name": "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf", "tags": ["x_refsource_MISC"], "url": "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf"}], "affected": [{"vendor": "OpenSIPS", "product": "opensips", "versions": [{"version": "< 3.1.7", "status": "affected"}, {"version": ">= 3.2.0, < 3.2.4", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-03-15T20:58:06.736Z"}, "descriptions": [{"lang": "en", "value": "OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, when the function `append_hf` handles a SIP message with a malformed To header, a call to the function `abort()` is performed, resulting in a crash. This is due to the following check in `data_lump.c:399` in the function `anchor_lump`. An attacker abusing this vulnerability will crash OpenSIPS leading to Denial of Service. It affects configurations containing functions that make use of the affected code, such as the function `append_hf`. This issue has been fixed in versions 3.1.7 and 3.2.4."}], "source": {"advisory": "GHSA-qvj2-vqrg-f5jx", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T12:16:35.869Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qvj2-vqrg-f5jx", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qvj2-vqrg-f5jx"}, {"name": "https://github.com/OpenSIPS/opensips/commit/cb56694d290530ac308f44b453c18120b1c1109d", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/OpenSIPS/opensips/commit/cb56694d290530ac308f44b453c18120b1c1109d"}, {"name": "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf"}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*", "matchCriteriaId": "8EF642AA-D786-40DF-801D-515888AF89BE", "versionEndExcluding": "3.1.7", "vulnerable": true}, {"criteria": "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*", "matchCriteriaId": "34713A76-CAED-43CF-A77C-73F1C36208AA", "versionEndExcluding": "3.2.4", "versionStartIncluding": "3.2.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, when the function `append_hf` handles a SIP message with a malformed To header, a call to the function `abort()` is performed, resulting in a crash. This is due to the following check in `data_lump.c:399` in the function `anchor_lump`. An attacker abusing this vulnerability will crash OpenSIPS leading to Denial of Service. It affects configurations containing functions that make use of the affected code, such as the function `append_hf`. This issue has been fixed in versions 3.1.7 and 3.2.4."}], "id": "CVE-2023-27599", "lastModified": "2024-11-21T07:53:14.060", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2023-03-15T21:15:09.247", "references": [{"source": "[email protected]", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/OpenSIPS/opensips/commit/cb56694d290530ac308f44b453c18120b1c1109d"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qvj2-vqrg-f5jx"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/OpenSIPS/opensips/commit/cb56694d290530ac308f44b453c18120b1c1109d"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qvj2-vqrg-f5jx"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "[email protected]", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "[email protected]", "type": "Primary"}]}