NULL pointer dereference in Opensips

CVE-2026-46334

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the SDP bandwidth-line parsing logic. A SIP request with Content-Type: application/sd…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

Affected products

  • Opensips — versions >= 3.4.0, < 3.6.6, >= 4.0.0-beta, < 4.0.0-rc1

Weakness classification (CWE)

References