{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3akamailiokamailio6.1.3/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:kamailio:kamailio:6.1.3:*:*:*:*:*:*:*","cpe:2.3:a:kamailio:kamailio:6.1.4:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-106804"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Kamailio (v6.1.3, v6.1.4)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Kamailio"],"content_html":"\u003cp\u003eA stack-based buffer overflow vulnerability exists in Kamailio versions 6.1.3 and 6.1.4 within the ims_qos_npn module. The function w_rx_aar_register() copies the host field from a SIP Via header into a fixed 46-byte stack buffer without performing adequate length validation. An unauthenticated, remote attacker can trigger this vulnerability by sending a specially crafted SIP REGISTER request to the server.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe primary observed impact is application instability and process termination, resulting in a denial-of-service condition for the affected Kamailio instance. While the vulnerability involves a stack-based buffer overflow, the report identifies the outcome as denial of service.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all Kamailio instances to identify deployments running versions 6.1.3 or 6.1.4.\u003c/li\u003e\n\u003cli\u003eMonitor logs for malformed SIP traffic targeting the ims_qos_npn module.\u003c/li\u003e\n\u003cli\u003eUpgrade affected Kamailio instances to a version where this vulnerability is remediated once a patch is available from the vendor.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-02T19:49:15Z","date_published":"2026-11-02T19:49:15Z","id":"https://feed.craftedsignal.io/briefs/2026-11-kamailio-stack-overflow/","summary":"A stack-based buffer overflow in the Kamailio ims_qos_npn module allows an unauthenticated remote attacker to cause a denial-of-service condition via a crafted SIP REGISTER request.","title":"Kamailio: Stack-based buffer overflow in ims_qos_npn module (CVE-2026-106804)","url":"https://feed.craftedsignal.io/briefs/2026-11-kamailio-stack-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:kamailio:kamailio:6.1.3:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}