CVE-2023-28098: OpenSIPS has vulnerability in the Digest Authentication Parser
OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, a specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected way due to a bug in the function parseparamname() . This issue was discovered while performing coverage guided fuzzing of the function parsemsg. The AddressSanitizer identified that the issue occurred in the function qmemchr() which is being called by the function parseparamname(). This issue may cause erratic program behaviour or a server crash. It affects configurations containing functions that make use of the affected code, such as the function wwwauthorize() . Versions 3.1.7 and 3.2.4 contain a fix.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28098?
CVE-2023-28098 is considered a high severity vulnerability that can lead to crashes or unexpected server behavior.
How do I fix CVE-2023-28098?
To fix CVE-2023-28098, upgrade OpenSIPS to version 3.1.7 or 3.2.4 or later.
Which versions of OpenSIPS are affected by CVE-2023-28098?
Versions of OpenSIPS prior to 3.1.7 and versions between 3.2.0 and 3.2.4 are affected by CVE-2023-28098.
What type of issue does CVE-2023-28098 represent?
CVE-2023-28098 represents a denial of service issue due to improper handling of specially crafted Authorization headers.
How was CVE-2023-28098 discovered?
CVE-2023-28098 was discovered during an audit, specifically related to the function `parse_param_name()` in OpenSIPS.