PT-2018-12707 · Kamailio+2 · Kamailio+2

Henning Westerholt · Publicado 2018-07-31 · Atualizado 2025-04-07 · CVE-2018-14767

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kamailio versions prior to 5.0.7 Kamailio versions 5.1.x prior to 5.1.4

Description A crafted SIP message with a double "To" header and an empty "To" tag can cause a segmentation fault and crash due to missing input validation in the build res buf from sip req core function. This could result in denial of service and potentially the execution of arbitrary code.

Recommendations For Kamailio versions prior to 5.0.7, update to version 5.0.7 or later. For Kamailio versions 5.1.x prior to 5.1.4, update to version 5.1.4 or later. As a temporary workaround, consider implementing additional input validation for SIP messages to prevent crashes.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-14767

DLA-1471-1

DSA-4267-1

USN-7416-1

Produtos afetados

Kamailio

Linuxmint

Ubuntu

Referências · 31

• 🔥 https://skalatan.de/blog/advisory-hw-2018-05 · Exploit
• https://github.com/kamailio/kamailio/commit/f50c9c853e7809810099c970780c30b0765b0643 · Nota
• https://lists.debian.org/debian-lts-announce/2018/08/msg00018.html · Nota
• https://census-labs.com/news/2016/03/30/kamailio-seas-heap-overflow · Nota
• https://osv.dev/vulnerability/DLA-1471-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-7416-1 · Aviso do Fabricante
• http://packetstormsecurity.com/files/136477/Kamailio-4.3.4-Heap-Overflow.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2385 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28361 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14767 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-14767 · Nota de Segurança
• https://bdu.fstec.ru/vul/2016-02085 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-14767 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-14767 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-2385 · Aviso do Fabricante