Debian/kamailio: critical 9.8
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcitt
Action: Upgrade kamailio to 5.1.4-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1.4-1 | - |
Fixed versions
| 5.1.4-1 |
Sources
- osv: DEBIAN-CVE-2018-16657#Debian:13/kamailio
- https://security-tracker.debian.org/tracker/CVE-2018-16657
published · modified · JSON