PT-2017-6499 · Kamailio · Kamailio

Helmut Grohne · Published 2017-06-27 · Updated 2017-07-05 · CVE-2015-1591

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions kamailio versions prior to 4.2.0-2

Description The issue allows local users to gain privileges due to a problem in the kamailio build process.

Recommendations For versions prior to 4.2.0-2, update to version 4.2.0-2 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-1591

Affected Products

Kamailio

References · 10

• https://security-tracker.debian.org/tracker/CVE-2015-1591 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-1591 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-1591 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-1591 · Security Note
• https://github.com/kamailio/kamailio/issues/48 · Note
• https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1591.html · Note
• http://openwall.com/lists/oss-security/2015/02/12/7 · Note
• http://cve.killedkenny.io/cve/CVE-2015-1591 · Note
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775681 · Note
• https://bugs.debian.org/cgi-bin/bugreport.cgi?msg=17%3Bfilename=0001-fix-fifo-and-ctl-defaults-pointing-to-unsecure-tmp-d.patch%3Batt=1%3Bbug=775681 · Note