A high-severity denial of service vulnerability in Kamailio, version 6.1.1 and earlier, enables unauthenticated remote attackers to crash the IMS P-CSCF registration service.

The vulnerability exists within the IMS P-CSCF registration handling components. It is an unauthenticated flaw that allows a remote attacker to trigger a denial of service condition by sending specifically crafted registration requests.

Successful exploitation of this vulnerability results in a denial of service, which can render critical telecommunications infrastructure unavailable. Given the CVSS score of 7.5, this high-severity flaw poses a significant risk to service continuity, potentially causing substantial operational downtime and service disruption for dependent users or downstream systems.

Immediate Action: Upgrade the Kamailio instance to a version beyond 6.1.1 that incorporates the fix provided in commit 91c5ca751799db4f25a28a495350cc97f7c2f390.

Proactive Monitoring: Monitor system logs for unusual spikes in registration requests or service instability within the P-CSCF module.

Compensating Controls: Implement rate limiting or traffic shaping at the network perimeter to restrict the volume of registration requests reaching the P-CSCF component.

Public Exploit Available: Unknown

Organizations utilizing Kamailio should prioritize testing and applying the upstream fix as soon as it is integrated into their specific distribution. Due to the potential for service disruption, maintaining high availability for the P-CSCF registration service is critical, and patching remains the most effective method to eliminate the vulnerability.