Threats tagged 'ghsa-g9r9-79hc-j698'

Kamailio versions 6.1.3 and 6.1.4 contain a stack-based buffer overflow vulnerability in the ims_registrar_pcscf module. The flaw occurs when processing a crafted application/reginfo+xml NOTIFY message, where an attacker-controlled port value is copied into a fixed 5-byte stack buffer without length validation. This can lead to stack corruption and termination of the P-CSCF process, causing a denial of service. The vulnerability can be triggered by an unauthenticated remote attacker.