4.8
Moyenne
CVE-2025-12206 A flaw has been found in Kamailio 5.5
Description
A flaw has been found in Kamailio 5.5. The impacted element is the function rve_is_constant of the file src/core/rvalue.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been published and may be used. It is still unclear if this vulnerability genuinely exists. This attack requires manipulating config files which might not be a realistic scenario in many cases. The vendor was contacted early about this disclosure but did not respond in any way.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Kamailio | 5.5 | Pas de correctif indiqué |
Références
- VDB-329876 | Kamailio rvalue.c rve_is_constant null pointer dereference vuldb.com
- VDB-329876 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #673240 | Kamailio Project Kamailio SIP Server 5.5 NULL Pointer Dereference vuldb.com
- shimo.im shimo.im
- www.openwall.com www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Kamailio
Les 7 CVE de Kamailio →
CVE-2026-108822
A vulnerability was detected in Kamailio up to 6.0.7/6.1.3
6.9
Moyenne
CVE-2026-93962
A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1
6.9
Moyenne
CVE-2026-82608
A vulnerability was determined in Kamailio up to 5.5.0/6.0.7
5.3
Moyenne
CVE-2025-12207
A vulnerability has been found in Kamailio 5.5
4.8
Moyenne