CVE-2020-28361 Security feature bypass in n/a
An attacker with valid credentials can bypass header removal protections in Kamailio to disrupt call accounting, potentially causing revenue loss.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-28361?
CVE-2020-28361 is a medium-severity vulnerability in n/a, published on 18 Nov 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Kamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the remove_hf function in the Kamailio textops module. Particular use of remove_hf in Sippy Softswitch may allow skilled attacker having a valid credential in the system to disrupt internal call start/duration accounting mechanisms leading potentially to a loss of revenue.
Weakness: CWE-444
Which versions are affected by CVE-2020-28361?
It affects 1 product.
Products include Kamailio Kamailio.
How do I fix CVE-2020-28361?
Upgrade to a fixed version.
Is CVE-2020-28361 being exploited?
There is no known exploitation of CVE-2020-28361 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2020-28361, GHSA-qw54-9qj3-wxh7, UBUNTU-CVE-2020-28361.