Denial of Service Vulnerability in OpenSIPS by OpenSIPS Community
CVE-2013-3722

7.5HIGH

Key Information:

Vendor

Opensips

Status
Opensips
Vendor
CVE Published:
17 February 2020

What is CVE-2013-3722?

A vulnerability exists in OpenSIPS software prior to version 1.10, where an infinite loop in the lookup.c file can lead to a Denial of Service condition. Exploiting this flaw can render the service unresponsive, impacting the availability of communication services that rely on OpenSIPS.

References

http://github.com/OpenSIPS/opensips/commit/54e027adfa486c...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.