Kamailio · Kamailio · CVE-2016-2385
**Name of the Vulnerable Software and Affected Versions**
Kamailio versions prior to 4.3.5
**Description**
The issue is related to a heap-based buffer overflow in the `encode msg` function, located in the `encode msg.c` file of the SEAS module. This overflow can be triggered by a large SIP packet, allowing remote attackers to cause a denial of service, which includes memory corruption and process crash, or possibly execute arbitrary code.
**Recommendations**
For versions prior to 4.3.5, update to version 4.3.5 or later to resolve the issue. As a temporary workaround, consider restricting the size of incoming SIP packets to prevent exploitation of the `encode msg` function in the SEAS module.