PT-2017-6499 · Kamailio · Kamailio

Helmut Grohne · Publicado 2017-06-27 · Atualizado 2017-07-05 · CVE-2015-1591

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions kamailio versions prior to 4.2.0-2

Description The issue allows local users to gain privileges due to a problem in the kamailio build process.

Recommendations For versions prior to 4.2.0-2, update to version 4.2.0-2 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-1591

Produtos afetados

Kamailio

Referências · 10

• https://github.com/kamailio/kamailio/issues/48 · Nota
• https://security-tracker.debian.org/tracker/CVE-2015-1591 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-1591 · Aviso do Fabricante
• https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1591.html · Nota
• http://openwall.com/lists/oss-security/2015/02/12/7 · Nota
• http://cve.killedkenny.io/cve/CVE-2015-1591 · Nota
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775681 · Nota
• https://osv.dev/vulnerability/CVE-2015-1591 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-1591 · Nota de Segurança
• https://bugs.debian.org/cgi-bin/bugreport.cgi?msg=17%3Bfilename=0001-fix-fifo-and-ctl-defaults-pointing-to-unsecure-tmp-d.patch%3Batt=1%3Bbug=775681 · Nota