PT-2018-13677 · Kamailio+2 · Kamailio+2

Henning Westerholt · Published 2018-09-07 · Updated 2023-04-14 · CVE-2018-16657

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kamailio versions prior to 5.0.7 Kamailio versions 5.1.x prior to 5.1.4

Description A crafted SIP message with an invalid Via header can cause a segmentation fault and crash Kamailio due to missing input validation in the crcitt string array core function for calculating a CRC hash for To tags. An additional error is present in the check via address core function, which also misses input validation. This could result in denial of service and potentially the execution of arbitrary code.

Recommendations For Kamailio versions prior to 5.0.7, update to version 5.0.7 or later. For Kamailio versions 5.1.x prior to 5.1.4, update to version 5.1.4 or later.

Exploit

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2018-16657

DLA-1503-1

DSA-4292-1

USN-6022-1

Affected Products

Kamailio

Linuxmint

Ubuntu

References · 25

• 🔥 https://skalatan.de/blog/advisory-hw-2018-06 · Exploit
• https://osv.dev/vulnerability/CVE-2018-16657 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6022-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-27507 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6022-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-16657 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-16657 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-4292-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DLA-1503-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-16657 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-16657 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1503-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4292-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-16657 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16657 · Security Note