Debian/kamailio: critical 9.8
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in
Action: Upgrade kamailio to 5.1.4-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1.4-1 | - |
Fixed versions
| 5.1.4-1 |
Sources
- osv: DEBIAN-CVE-2018-14767#Debian:13/kamailio
- https://security-tracker.debian.org/tracker/CVE-2018-14767
published · modified · JSON