Buffer Overflow Vulnerability in Kamailio SIP Server by Kamailio
CVE-2026-108822

6.9MEDIUM

Key Information:

Vendor

Kamailio

Status
Kamailio
Vendor
CVE Published:
12 October 2026

What is CVE-2026-108822?

A buffer overflow vulnerability exists in the Kamailio SIP Server affecting versions up to 6.0.7 and 6.1.3. The issue arises from the 'isup_get_calling_party' function within the 'src/modules/sipt/ss7_parser.c' file, where improper handling of argument length can allow malicious remote actors to exploit the server. It is imperative for users to upgrade to versions 6.0.8 or 6.1.4, where this vulnerability has been patched, to mitigate potential security risks.

Affected Version(s)

Kamailio 6.0.0

Kamailio 6.0.1

Kamailio 6.0.2

References

https://vuldb.com/vuln/416599
vdb-entrytechnical-description
https://vuldb.com/vuln/416599/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-108822
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

JerryGW (VulDB User)
.