Heap-Based Buffer Overflow in Kamailio: CVE-2025-12204
Summary
DEBIAN-CVE-2025-12204: A security vulnerability has been detected in Kamailio 5.5. Affects kamailio versions 5.4.4-1 – 6.0.3-3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Kamailio is an open-source SIP server that provides a robust platform for handling VoIP communications. It is widely used for its scalability and flexibility in managing SIP signaling. The package is crucial for applications that require real-time communication, such as VoIP services. However, a vulnerability has been identified in Kamailio version 5.5 that could potentially compromise the security of systems utilizing this package.
Vulnerability Detail
A security vulnerability has been detected in Kamailio 5.5, specifically in the function rve_destroy located in the src/core/rvalue.c file of the Configuration File Handler component. This vulnerability allows for a heap-based buffer overflow, which can be exploited locally. The ramifications of this vulnerability include potential unauthorized access to sensitive data, system crashes, or arbitrary code execution. The exploit has been publicly disclosed, and the vendor was contacted but did not respond.
How To Fix
No fixed version is published for this vulnerability.
To rectify the vulnerability, it is essential to update Kamailio to the latest patched version. You can do this by executing the following command in your terminal:
sudo apt-get update && sudo apt-get install kamailio
Ensure that you are using a version that addresses CVE-2025-12204.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you may restrict access to the Kamailio service to trusted users only, thereby minimizing the risk of local exploitation until a patch is applied.
Conclusion
In summary, CVE-2025-12204 represents a significant security risk for users of Kamailio 5.5 due to a heap-based buffer overflow vulnerability. It is crucial for users to update their systems promptly to mitigate potential threats. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for kamailio →
FAQ
CVE-2025-12204 is a vulnerability in Kamailio 5.5 that allows for a heap-based buffer overflow, potentially leading to unauthorized access or system crashes.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If an immediate update is not possible, consider restricting access to the Kamailio service to trusted users to mitigate the risk.
The CVSS score of CVE-2025-12204 is 7.8, indicating a high severity level.
More information can be found in the official Debian security advisories and the CVE database.
References
Related vulnerabilities
Recent vulnerabilities recorded for kamailio.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.