CVE-2015-1591
HighSummary
Versions of kamailio before 4.2.0-2 have a vulnerability that allows local users to gain elevated privileges.
Risk Assessment
The organization may be exposed to unauthorized access to systems and data by local users.
Recommendation
It is recommended to upgrade kamailio to version 4.2.0-2 or later to mitigate this vulnerability.
Other vulnerabilities in kamailio
See all- CVE-2015-1590High
The kamcmd administrative utility and default configuration in kamailio before version 4.3.0 use the /tmp/kamailio_ctl directory.
- CVE-2013-7426Critical
CVE-2013-7426 identifies an insecure handling of temporary files in kamailio 4.0.1, specifically concerning the /tmp/kamailio_fifo file. This may lead to unauthorized access to data.
- CVE-2026-39864Medium
Kamailio before versions 6.0.5 and 5.8.7 contains an out-of-bounds read vulnerability in the auth module. A specially crafted SIP packet can cause a process crash (DoS) after successful user authentication without a database backend.
- CVE-2026-39863High
In Kamailio (formerly OpenSER and SER) prior to versions 6.1.1, 6.0.6, and 5.8.8, an out-of-bounds access vulnerability exists in the core. A remote attacker can send a specially crafted TCP packet, causing a process crash (denial of service). This affects Kamailio instances with TCP or TLS listeners.
Original NVD description (English source)
The kamailio build in kamailio before 4.2.0-2 process allows local users to gain privileges.