Cpe:2.3:a:kamailio:kamailio:6.1.3:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3akamailiokamailio6.1.3/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 02 Nov 2026 19:49:15 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgKamailio: Stack-based buffer overflow in ims_qos_npn module (CVE-2026-106804)https://feed.craftedsignal.io/briefs/2026-11-kamailio-stack-overflow/Mon, 02 Nov 2026 19:49:15 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-kamailio-stack-overflow/A stack-based buffer overflow in the Kamailio ims_qos_npn module allows an unauthenticated remote attacker to cause a denial-of-service condition via a crafted SIP REGISTER request.A stack-based buffer overflow vulnerability exists in Kamailio versions 6.1.3 and 6.1.4 within the ims_qos_npn module. The function w_rx_aar_register() copies the host field from a SIP Via header into a fixed 46-byte stack buffer without performing adequate length validation. An unauthenticated, remote attacker can trigger this vulnerability by sending a specially crafted SIP REGISTER request to the server.

Impact

The primary observed impact is application instability and process termination, resulting in a denial-of-service condition for the affected Kamailio instance. While the vulnerability involves a stack-based buffer overflow, the report identifies the outcome as denial of service.

Recommendation

  • Inventory all Kamailio instances to identify deployments running versions 6.1.3 or 6.1.4.
  • Monitor logs for malformed SIP traffic targeting the ims_qos_npn module.
  • Upgrade affected Kamailio instances to a version where this vulnerability is remediated once a patch is available from the vendor.
]]>lowadvisory