CVE-2026-39864

Kamailio is an open source implementation of a SIP Signaling Server. Prior to 6.0.5 and 5.8.7, an out-of-bounds read in the auth module of Kamailio (formerly OpenSER and SER) allows remote attackers to cause a denial of service (process crash) via a specially crafted SIP packet if a successful user authentication without a database backend is followed by additional user identity checks. This vulnerability is fixed in 6.0.5 and 5.8.7.

CVSS v3 4.4 MEDIUM

4.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.7 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/kamailio/kamailio/security/advisories/GHSA-6m86-m342-g48m	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:kamailio:kamailio::::::::
	cpe:2.3:a:kamailio:kamailio::::::::

History

No history.

Information

Published : 2026-04-08 20:16

Updated : 2026-07-24 21:10

NVD link : CVE-2026-39864

Mitre link : CVE-2026-39864

CVE.ORG link : CVE-2026-39864

JSON object : View

Products Affected

kamailio

kamailio

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2026-39864", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-39864", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-08T20:19:26.241924Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 0.7}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.2}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "kamailio", "product": "kamailio", "versions": [{"status": "affected", "version": "< 5.8.7"}, {"status": "affected", "version": ">= 6.0.0, < 6.0.5"}]}]}], "published": "2026-04-08T20:16:26.700", "references": [{"url": "https://github.com/kamailio/kamailio/security/advisories/GHSA-6m86-m342-g48m", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "Kamailio is an open source implementation of a SIP Signaling Server. Prior to 6.0.5 and 5.8.7, an out-of-bounds read in the auth module of Kamailio (formerly OpenSER and SER) allows remote attackers to cause a denial of service (process crash) via a specially crafted SIP packet if a successful user authentication without a database backend is followed by additional user identity checks. This vulnerability is fixed in 6.0.5 and 5.8.7."}, {"lang": "es", "value": "Kamailio es una implementaci\u00f3n de c\u00f3digo abierto de un servidor de se\u00f1alizaci\u00f3n SIP. Antes de 6.0.5 y 5.8.7, una lectura fuera de l\u00edmites en el m\u00f3dulo auth de Kamailio (anteriormente OpenSER y SER) permite a atacantes remotos causar una denegaci\u00f3n de servicio (ca\u00edda del proceso) a trav\u00e9s de un paquete SIP especialmente dise\u00f1ado si una autenticaci\u00f3n de usuario exitosa sin un backend de base de datos es seguida por comprobaciones adicionales de identidad de usuario. Esta vulnerabilidad se corrige en 6.0.5 y 5.8.7."}], "lastModified": "2026-07-24T21:10:00.143", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:kamailio:kamailio:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFE6E387-8DDD-4EE6-B837-CEB94BBDE3A4", "versionEndExcluding": "5.8.7"}, {"criteria": "cpe:2.3:a:kamailio:kamailio:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68C6ED5C-A7BF-4C85-B46C-56F3B478B37B", "versionEndExcluding": "6.0.5", "versionStartIncluding": "6.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}