Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

OpenSIPS/opensips

              master @ 61ae316
            

286

Fixes

CVEs

CRITICAL

Peak severity

45.8%

Coverage

Highlights

Buffer Overflow: 72 prior fixes. Scrutinize any change in this area.

modules/proto_hep/hep.c: most-fixed (9 issues). Treat as high-risk during review.

190 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Buffer Overflow: Multiple fixes in HEP handling address buffer overflows from unchecked chunk lengths, incorrect source pointers, and insufficient allocation sizes, indicating a high-risk parsing surface for attacker-controlled packets.

Memory Corruption: Several fixes address memory corruption in RTP proxy interactions, including use-after-free of buffers, out-of-bounds array writes, and incorrect memcpy usage, highlighting the risk in handling RTP control protocols.

Auth Bypass: Multiple fixes in the permissions module address bypasses via incorrect IP/subnet matching, flawed group lookup logic, and keyword parsing, indicating a critical access control surface.