A critical out-of-bounds memory access vulnerability in Kamailio SIP signaling servers enables unauthenticated remote attackers to crash the service, resulting in a denial of service.

The vulnerability stems from an improper restriction of operations within the bounds of a memory buffer (CWE-119) in the core of Kamailio. This flaw is triggered by unauthenticated remote attackers who can send a specially crafted data packet over TCP or TLS to trigger a process crash.

The exploitation of this vulnerability leads to a denial of service, rendering the SIP signaling server unavailable for legitimate traffic. Given that Kamailio is often a critical component of communication infrastructure, this disruption can result in significant operational downtime for voice and messaging services. With a CVSS score of 7.5, this issue represents a high risk to availability, necessitating prompt attention to prevent service degradation.

Immediate Action: Upgrade Kamailio to version 5.8.8, 6.0.6, or 6.1.1 to incorporate the necessary memory safety patches.

Proactive Monitoring: Monitor system logs for frequent process restarts or unexpected service crashes, which may indicate attempted exploitation of this memory corruption flaw.

Compensating Controls: Deploy a firewall or an Intrusion Prevention System (IPS) to filter malformed TCP or TLS traffic directed at SIP listeners until the software can be patched.

Public Exploit Available: Unknown

The vulnerability poses a clear threat to the availability of Kamailio-based infrastructure. Organizations utilizing Kamailio with TCP or TLS listeners should prioritize the application of the vendor-provided patches. Given the ease of triggering a crash via remote network packets, immediate patching is recommended to ensure the continued reliability of communication services.