CyberRota Analysis
AI-GeneratedA vulnerability in the AVP Handler of Kamailio versions up to 5.5.0 and 6.0.7 allows for remote exploitation through an out-of-bounds read in the get_4bytes function. This could lead to unauthorized access or information disclosure, making it critical for organizations using affected versions to prioritize patching. Users of version 5.5.0 should be particularly vigilant, as it is no longer maintained.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modules/ims_registrar_scscf/cxdx_avp.c of the component AVP Handler. Executing a manipulation can lead to out-of-bounds read. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called abb5d60af6eefbd367bf6588c5589566b090e272. It is advisable to implement a patch to correct this issue. The vendor points out, that "[v]ersion 5.5.0 is old and not maintained anymore."