A critical stack-based buffer overflow in the OpenSIPS SIP server allows remote attackers to cause a service crash, leading to significant system unavailability.

This is a stack-based buffer overflow (CWE-121) occurring within the SIP processing logic. The vulnerability is exploitable by unauthenticated remote attackers, as indicated by the CVSS vector AV:N/AC:L/AT:N/PR:N.

Successful exploitation results in the immediate crash of the OpenSIPS process, causing a denial of service for all voice and messaging traffic handled by the server. Given the CVSS score of 8.7, this represents a high risk to business continuity, as SIP servers are typically critical infrastructure for enterprise communications. Unplanned downtime in these systems can disrupt global operations and necessitate emergency recovery procedures.

Immediate Action: Upgrade to OpenSIPS versions 3.6.6 or 4.0.0-rc1, or apply the official patches provided in the referenced GitHub security advisory.

Proactive Monitoring: Review system logs for sudden process terminations or unexpected segmentation faults that may indicate an exploitation attempt.

Compensating Controls: Implement rate limiting and input validation at the network perimeter to drop malformed or anomalous SIP packets before they reach the server.

Public Exploit Available: No

The severity of this vulnerability necessitates immediate attention to prevent service disruptions. Administrators must prioritize the application of the vendor-supplied patches to ensure the stability and security of their communications infrastructure.