PT-2018-13677 · Kamailio+2 · Kamailio+2

Henning Westerholt · Publicado 2018-09-07 · Atualizado 2023-04-14 · CVE-2018-16657

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kamailio versions prior to 5.0.7 Kamailio versions 5.1.x prior to 5.1.4

Description A crafted SIP message with an invalid Via header can cause a segmentation fault and crash Kamailio due to missing input validation in the crcitt string array core function for calculating a CRC hash for To tags. An additional error is present in the check via address core function, which also misses input validation. This could result in denial of service and potentially the execution of arbitrary code.

Recommendations For Kamailio versions prior to 5.0.7, update to version 5.0.7 or later. For Kamailio versions 5.1.x prior to 5.1.4, update to version 5.1.4 or later.

Exploit

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2018-16657

DLA-1503-1

DSA-4292-1

USN-6022-1

Produtos afetados

Kamailio

Linuxmint

Ubuntu

Referências · 25

• 🔥 https://skalatan.de/blog/advisory-hw-2018-06 · Exploit
• https://github.com/kamailio/kamailio/issues/2503 · Nota
• https://github.com/kamailio/kamailio/commit/f07dabffef98c7088cdbc2bd695a4ae7a241b159 · Nota
• https://github.com/kamailio/kamailio/commit/ad68e402ece8089f133c10de6ce319f9e28c0692 · Nota
• https://github.com/kamailio/kamailio/commit/d67b2f9874ca23bd69f18df71b8f53b1b6151f6d · Nota
• https://osv.dev/vulnerability/CVE-2018-16657 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-6022-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2020-27507 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-6022-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-16657 · Nota de Segurança
• https://packages.debian.org/src:kamailio · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-16657 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/DSA-4292-1 · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2018/09/msg00013.html · Nota
• https://security-tracker.debian.org/tracker/DLA-1503-1 · Aviso do Fabricante