Threats tagged 'ghsa-wm7p-xjpr-gf9g'

A stack-based buffer overflow vulnerability exists in Kamailio versions 6.1.3 and 6.1.4 within the ims_qos_npn module. The vulnerability arises from the w_rx_aar_register() function copying an attacker-controlled host field from the SIP Via header into a fixed-size 46-byte stack buffer without length validation. An unauthenticated remote attacker can exploit this by sending a crafted SIP REGISTER request, causing stack corruption and termination of the Kamailio process, resulting in denial of service.