Alpine/kamailio: critical 9.8
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in
Action: Upgrade kamailio to 5.1.4-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.1.0 | 5.1.4-r0 | - |
Fixed versions
| 5.1.4-r0 |
Sources
- osv: ALPINE-CVE-2018-14767#Alpine:v3.7/kamailio
- https://security.alpinelinux.org/vuln/CVE-2018-14767
published · modified · JSON