« Volver al listado

CVE-2023-28099

Estado: ModificadaAlta (7.5)—

OpenSIPS es una implementación de servidor del Protocolo de inicio de sesión (SIP, Session Initiation Protocol). Antes de las versiones 3.1.9 y 3.2.6, si se utiliza `ds_is_in_list()` con una cadena de dirección IP no válida (`NULL` es una entrada no permitida), OpenSIPS intentará imprimir una cadena a partir de una dirección aleatoria (basura de la pila), lo que podría provocar un fallo.

Leer descripción completaMostrar menos

Todos los usuarios de `ds_is_in_list()` que no utilicen la variable `$si` como primer parámetro podrían verse afectados por esta vulnerabilidad en mayor o menor medida, o en absoluto, dependiendo de si los datos pasados a la función son una cadena de dirección IPv4 o IPv6 válida o no. Las correcciones estarán disponibles a partir de las versiones menores 3.1.9 y 3.2.6. No se conocen soluciones alternativas.

Traducción automática del texto original de NVD (en inglés).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Opensips — Opensips

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-28099",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-28099",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-25T14:29:32.495012Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.9,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.2
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "OpenSIPS",
          "product": "opensips",
          "versions": [
            {
              "status": "affected",
              "version": "< 3.1.9"
            },
            {
              "status": "affected",
              "version": ">= 3.2.0, < 3.2.6"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-03-15T23:15:09.807",
  "references": [
    {
      "url": "https://github.com/OpenSIPS/opensips/commit/e2f13d374",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/OpenSIPS/opensips/issues/2780",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-pfm5-6vhv-3ff3",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/OpenSIPS/opensips/commit/e2f13d374",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/OpenSIPS/opensips/issues/2780",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-pfm5-6vhv-3ff3",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.9 and 3.2.6, if `ds_is_in_list()` is used with an invalid IP address string (`NULL` is illegal input), OpenSIPS will attempt to print a string from a random address (stack garbage), which could lead to a crash.  All users of `ds_is_in_list()` without the `$si` variable as 1st parameter could be affected by this vulnerability to a larger, lesser or no extent at all, depending if the data passed to the function is a valid IPv4 or IPv6 address string or not. Fixes will are available starting with the 3.1.9 and 3.2.6 minor releases. There are no known workarounds."
    }
  ],
  "lastModified": "2026-06-17T05:46:52.120",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F318FB66-A6E9-4A16-996B-DD76A8C64A6E",
              "versionEndExcluding": "3.1.9"
            },
            {
              "criteria": "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C466525-94B6-4196-9CEA-CD72452FE22D",
              "versionEndExcluding": "3.2.6",
              "versionStartIncluding": "3.2.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-advisories@github.com"
}