VDB-329876 · CVE-2025-12206 · EUVD-2025-36070

Kamailio 5.5 src/core/rvalue.c rve_is_constant Kari na aiki ⚔ [Gaskiya ba a tabbatar da shi ba]

Hakika vulnerability da aka rarraba a matsayin karshewa an gano a Kamailio 5.5. Tabbas, aikin rve_is_constant ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil src/core/rvalue.c, a cikin sashi $software_component. Wuro manipulation ga Kari na aiki. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-476. Lalle, rauni an sanar da shi 10/25/2025. Ana samun bayanin tsaro don saukewa a shimo.im. Ana kiran wannan rauni da CVE-2025-12206. Wuroo ka a yiɗi a yi ɗum e gese. Bayani na fasaha ga. Kuma, akwai exploit. Exploit ɗin an bayyana wa jama'a, za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á yí huɗɗi-na-gaskiya. Za a iya samun exploit a shimo.im. 0-day ga, an ndiyam a wuro be $0-$5k. Wannan haɗarin gaskiya har yanzu ana shakkar wanzuwarsa a yanzu. An kuma rubuta wannan vulnerability a wasu kundin bayanan vulnerability: Tenable (271818). If you want to get best quality of vulnerability data, you may have to visit VulDB.

6 Goyarwa · 103 Datenpunkte

Furɗe	Gargadi 1/5 10/27/2025 04:57	Gargadi 2/5 10/27/2025 05:50	Gargadi 3/5 10/29/2025 04:00	Gargadi 4/5 11/01/2025 20:48	Gargadi 5/5 11/04/2025 00:05
software_name	Kamailio	Kamailio	Kamailio	Kamailio	Kamailio
software_version	5.5	5.5	5.5	5.5	5.5
software_file	src/core/rvalue.c	src/core/rvalue.c	src/core/rvalue.c	src/core/rvalue.c	src/core/rvalue.c
software_function	rve_is_constant	rve_is_constant	rve_is_constant	rve_is_constant	rve_is_constant
vulnerability_cwe	CWE-476 (Kari na aiki)	CWE-476 (Kari na aiki)	CWE-476 (Kari na aiki)	CWE-476 (Kari na aiki)	CWE-476 (Kari na aiki)
vulnerability_risk	1	1	1	1	1
cvss3_vuldb_av	L	L	L	L	L
cvss3_vuldb_ac	L	L	L	L	L
cvss3_vuldb_pr	L	L	L	L	L
cvss3_vuldb_ui	N	N	N	N	N
cvss3_vuldb_s	U	U	U	U	U
cvss3_vuldb_c	N	N	N	N	N
cvss3_vuldb_i	N	N	N	N	N
cvss3_vuldb_a	L	L	L	L	L
cvss3_vuldb_e	P	P	P	P	P
cvss3_vuldb_rc	R	R	R	R	R
advisory_url	https://shimo.im/docs/aBAYMVMB2jUP9jAj/	https://shimo.im/docs/aBAYMVMB2jUP9jAj/	https://shimo.im/docs/aBAYMVMB2jUP9jAj/	https://shimo.im/docs/aBAYMVMB2jUP9jAj/	https://shimo.im/docs/aBAYMVMB2jUP9jAj/
exploit_availability	1	1	1	1	1
exploit_publicity	1	1	1	1	1
exploit_url	https://shimo.im/docs/aBAYMVMB2jUP9jAj/	https://shimo.im/docs/aBAYMVMB2jUP9jAj/	https://shimo.im/docs/aBAYMVMB2jUP9jAj/	https://shimo.im/docs/aBAYMVMB2jUP9jAj/	https://shimo.im/docs/aBAYMVMB2jUP9jAj/
source_cve	CVE-2025-12206	CVE-2025-12206	CVE-2025-12206	CVE-2025-12206	CVE-2025-12206
cna_responsible	VulDB	VulDB	VulDB	VulDB	VulDB
response_summary	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.
cvss2_vuldb_av	L	L	L	L	L
cvss2_vuldb_ac	L	L	L	L	L
cvss2_vuldb_ci	N	N	N	N	N
cvss2_vuldb_ii	N	N	N	N	N
cvss2_vuldb_ai	P	P	P	P	P
cvss2_vuldb_e	POC	POC	POC	POC	POC
cvss2_vuldb_rc	UR	UR	UR	UR	UR
cvss4_vuldb_av	L	L	L	L	L
cvss4_vuldb_ac	L	L	L	L	L
cvss4_vuldb_pr	L	L	L	L	L
cvss4_vuldb_ui	N	N	N	N	N
cvss4_vuldb_vc	N	N	N	N	N
cvss4_vuldb_vi	N	N	N	N	N
cvss4_vuldb_va	L	L	L	L	L
cvss4_vuldb_e	P	P	P	P	P
cvss2_vuldb_au	S	S	S	S	S
cvss2_vuldb_rl	ND	ND	ND	ND	ND
cvss3_vuldb_rl	X	X	X	X	X
cvss4_vuldb_at	N	N	N	N	N
cvss4_vuldb_sc	N	N	N	N	N
cvss4_vuldb_si	N	N	N	N	N
cvss4_vuldb_sa	N	N	N	N	N
cvss2_vuldb_basescore	1.7	1.7	1.7	1.7	1.7
cvss2_vuldb_tempscore	1.5	1.5	1.5	1.5	1.5
cvss3_vuldb_basescore	3.3	3.3	3.3	3.3	3.3
cvss3_vuldb_tempscore	3.0	3.0	3.0	3.0	3.0
cvss3_meta_basescore	3.3	3.3	4.0	4.0	4.0
cvss3_meta_tempscore	3.1	3.1	3.9	3.9	3.9
cvss4_vuldb_bscore	4.8	4.8	4.8	4.8	4.8
cvss4_vuldb_btscore	1.9	1.9	1.9	1.9	1.9
advisory_date	1761343200 (10/25/2025)	1761343200 (10/25/2025)	1761343200 (10/25/2025)	1761343200 (10/25/2025)	1761343200 (10/25/2025)
price_0day	$0-$5k	$0-$5k	$0-$5k	$0-$5k	$0-$5k
cve_nvd_summary	A flaw has been found in Kamailio 5.5. The impacted element is the function rve_is_constant of the file src/core/rvalue.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.	A flaw has been found in Kamailio 5.5. The impacted element is the function rve_is_constant of the file src/core/rvalue.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.	A flaw has been found in Kamailio 5.5. The impacted element is the function rve_is_constant of the file src/core/rvalue.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.	A flaw has been found in Kamailio 5.5. The impacted element is the function rve_is_constant of the file src/core/rvalue.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.	A flaw has been found in Kamailio 5.5. The impacted element is the function rve_is_constant of the file src/core/rvalue.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
cvss4_cna_av	L	L	L	L	L
cvss4_cna_ac	L	L	L	L	L
cvss4_cna_at	N	N	N	N	N
cvss4_cna_pr	L	L	L	L	L
cvss4_cna_ui	N	N	N	N	N
cvss4_cna_vc	N	N	N	N	N
cvss4_cna_vi	N	N	N	N	N
cvss4_cna_va	L	L	L	L	L
cvss4_cna_sc	N	N	N	N	N
cvss4_cna_si	N	N	N	N	N
cvss4_cna_sa	N	N	N	N	N
cvss4_cna_bscore	4.8	4.8	4.8	4.8	4.8
cvss3_cna_av	L	L	L	L	L
cvss3_cna_ac	L	L	L	L	L
cvss3_cna_pr	L	L	L	L	L
cvss3_cna_ui	N	N	N	N	N
cvss3_cna_s	U	U	U	U	U
cvss3_cna_c	N	N	N	N	N
cvss3_cna_i	N	N	N	N	N
cvss3_cna_a	L	L	L	L	L
cvss3_cna_basescore	3.3	3.3	3.3	3.3	3.3
cvss2_cna_av	L	L	L	L	L
cvss2_cna_ac	L	L	L	L	L
cvss2_cna_au	S	S	S	S	S
cvss2_cna_ci	N	N	N	N	N
cvss2_cna_ii	N	N	N	N	N
cvss2_cna_ai	P	P	P	P	P
cvss2_cna_basescore	1.7	1.7	1.7	1.7	1.7
euvd_id		EUVD-2025-36070	EUVD-2025-36070	EUVD-2025-36070	EUVD-2025-36070
cvss3_nvd_av			L	L	L
cvss3_nvd_ac			L	L	L
cvss3_nvd_pr			L	L	L
cvss3_nvd_ui			N	N	N
cvss3_nvd_s			U	U	U
cvss3_nvd_c			N	N	N
cvss3_nvd_i			N	N	N
cvss3_nvd_a			H	H	H
cvss3_nvd_basescore			5.5	5.5	5.5
nessus_id				271818	271818
nessus_name				Linux Distros Unpatched Vulnerability : CVE-2025-12206	Linux Distros Unpatched Vulnerability : CVE-2025-12206
advisory_disputed					1
source_misc					https://www.openwall.com/lists/oss-security/2025/11/02/3
decision_summary					This attack requires manipulating config files which might not be a realistic scenario in many cases.

◂ Gurɗo Gumti Gada ▸

Interested in the pricing of exploits?

See the underground prices here!