opensips vulnerabilities and fixes

Recent CVEs affecting opensips, with upgrade or downgrade steps. 11 tracked.

opensips has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 11. Most recent: 2023-03-15. Highest priority: CVE-2023-28097 (score 47/100).

• CVE-2023-28099 MEDIUM 5.9 UPGRADE OpenSIPS is a Session Initiation Protocol (SIP) server implementation
• CVE-2023-28098 MEDIUM 5.9 UPGRADE OpenSIPS is a Session Initiation Protocol (SIP) server implementation
• CVE-2023-28097 HIGH 7.5 UPGRADE OpenSIPS is a Session Initiation Protocol (SIP) server implementation
• CVE-2023-28096 MEDIUM 4.5 UPGRADE OpenSIPS, a Session Initiation Protocol (SIP) server implementation, has a memory leak starting in the 2.3 bra
• CVE-2023-28095 HIGH 7.5 UPGRADE OpenSIPS is a Session Initiation Protocol (SIP) server implementation
• CVE-2023-27601 HIGH 7.5 UPGRADE OpenSIPS is a Session Initiation Protocol (SIP) server implementation
• CVE-2023-27600 HIGH 7.5 UPGRADE OpenSIPS is a Session Initiation Protocol (SIP) server implementation
• CVE-2023-27599 HIGH 7.5 UPGRADE OpenSIPS is a Session Initiation Protocol (SIP) server implementation
• CVE-2023-27598 HIGH 7.5 UPGRADE OpenSIPS is a Session Initiation Protocol (SIP) server implementation
• CVE-2023-27597 HIGH 7.5 UPGRADE OpenSIPS is a Session Initiation Protocol (SIP) server implementation
• CVE-2023-27596 HIGH 7.5 UPGRADE OpenSIPS is a Session Initiation Protocol (SIP) server implementation

FAQ

How do I fix opensips vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is opensips being exploited right now?

None of the tracked opensips CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which opensips CVE should I patch first?

CVE-2023-28097 currently ranks highest (47/100): OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

RSS feed for opensips · ← Back to latest CVEs