« Volver al listado

CVE-2023-28098

Estado: ModificadaAlta (7.5)—

OpenSIPS es una implementación de un servidor del Protocolo de Inicio de Sesión (SIP). Antes de las versiones 3.1.7 y 3.2.4, una cabecera Authorization especialmente diseñada hace que OpenSIPS se bloquee o se comporte de forma inesperada debido a un error en la función `parse_param_name()`. Este problema se descubrió mientras se realizaba una prueba de fuzzing guiada por cobertura sobre la función parse_msg. AddressSanitizer identificó que el problema se producía en la función `q_memchr()`, que es invocada por la función `parse_param_name()`.

Leer descripción completaMostrar menos

Este problema puede provocar un comportamiento errático del programa o un bloqueo del servidor. Afecta a las configuraciones que contienen funciones que utilizan el código afectado, como la función `www_authorize()`. Las versiones 3.1.7 y 3.2.4 incluyen una solución.

Traducción automática del texto original de NVD (en inglés).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Opensips — Opensips

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-28098",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-28098",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-25T14:29:35.970124Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.9,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.2
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "OpenSIPS",
          "product": "opensips",
          "versions": [
            {
              "status": "affected",
              "version": "< 3.1.7"
            },
            {
              "status": "affected",
              "version": ">= 3.2.0, < 3.2.4"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-03-15T23:15:09.717",
  "references": [
    {
      "url": "https://github.com/OpenSIPS/opensips/commit/dd9141b6f67d7df4072f3430f628d4b73df5e102",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-jrqg-vppj-hr2h",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/OpenSIPS/opensips/commit/dd9141b6f67d7df4072f3430f628d4b73df5e102",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-jrqg-vppj-hr2h",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, a specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected way due to a bug in the function `parse_param_name()` . This issue was discovered while performing coverage guided fuzzing of the function parse_msg. The AddressSanitizer identified that the issue occurred in the function `q_memchr()` which is being called by the function `parse_param_name()`. This issue may cause erratic program behaviour or a server crash. It affects configurations containing\nfunctions that make use of the affected code, such as the function `www_authorize()` . Versions 3.1.7 and 3.2.4 contain a fix."
    }
  ],
  "lastModified": "2026-06-17T05:46:51.983",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8EF642AA-D786-40DF-801D-515888AF89BE",
              "versionEndExcluding": "3.1.7"
            },
            {
              "criteria": "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34713A76-CAED-43CF-A77C-73F1C36208AA",
              "versionEndExcluding": "3.2.4",
              "versionStartIncluding": "3.2.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-advisories@github.com"
}