The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Kamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the remove_hf function in the Kamailio textops module. Particular use of remove_hf in Sippy Softswitch may allow skilled attacker having a valid credential in the system to disrupt internal call start/duration accounting mechanisms leading potentially to a loss of revenue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade kamailio | Mar 21, 2024 | Nov 18, 2020 |
| Debian | — | Upgrade kamailio | Jul 30, 2024 | Nov 18, 2020 |
| Ubuntu | — | Upgrade kamailio (Ubuntu Pro) | Apr 7, 2025 | Nov 18, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub