إرسال #673240: Kamailio Project Kamailio SIP Server 5.5 NULL Pointer Dereferenceالمعلومات

عنوانKamailio Project Kamailio SIP Server 5.5 NULL Pointer Dereference
الوصفKamailio v5.5 contains a NULL pointer dereference in configuration parsing. The parser action for certain expression constructs calls `rve_is_constant($3)` without verifying `$3` is non-NULL; a crafted configuration can make `$3` NULL and cause `rve_is_constant()` to dereference NULL and crash the process. Impact: Denial of Service on startup.
المصدر⚠️ https://shimo.im/docs/aBAYMVMB2jUP9jAj/
المستخدم
 zh_vul (UID 91488)
ارسال11/10/2025 10:35 AM (8 أشهر منذ)
الاعتدال25/10/2025 01:52 PM (14 days later)
الحالةتمت الموافقة
إدخال VulDB329876 [Kamailio 5.5 src/core/rvalue.c rve_is_constant الحرمان من الخدمة]
النقاط19

Want to know what is going to be exploited?

We predict KEV entries!