PT-2018-12707 · Kamailio+2 · Kamailio+2

Henning Westerholt · Published 2018-07-31 · Updated 2025-04-07 · CVE-2018-14767

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kamailio versions prior to 5.0.7 Kamailio versions 5.1.x prior to 5.1.4

Description A crafted SIP message with a double "To" header and an empty "To" tag can cause a segmentation fault and crash due to missing input validation in the build res buf from sip req core function. This could result in denial of service and potentially the execution of arbitrary code.

Recommendations For Kamailio versions prior to 5.0.7, update to version 5.0.7 or later. For Kamailio versions 5.1.x prior to 5.1.4, update to version 5.1.4 or later. As a temporary workaround, consider implementing additional input validation for SIP messages to prevent crashes.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-14767

DLA-1471-1

DSA-4267-1

USN-7416-1

Affected Products

Kamailio

Linuxmint

Ubuntu

References · 31

• 🔥 https://skalatan.de/blog/advisory-hw-2018-05 · Exploit
• https://osv.dev/vulnerability/DLA-1471-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7416-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2385 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28361 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14767 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-14767 · Security Note
• https://bdu.fstec.ru/vul/2016-02085 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-14767 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14767 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2385 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-4267-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-14767 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-28361 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2018-14767 · Vendor Advisory