{"action":"Upgrade kamailio to 5.1.4-r0 or later.","affected":[{"fixed":"5.1.4-r0","introduced":"5.1.0"}],"component":"kamailio","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.7","exploited":false,"fixed_versions":["5.1.4-r0"],"id":"tcs_01M5NABHK5PD2ABNKE3PD0NANA","modified_at":"2026-10-23T17:17:55.217804660Z","published_at":"2018-07-31T06:29:00.227Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2018-14767","https://security.alpinelinux.org/vuln/CVE-2018-14767"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2018-14767#Alpine:v3.7/kamailio","url":"https://osv.dev/vulnerability/ALPINE-CVE-2018-14767"}],"summary":"In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double \"To\" header and an empty \"To\" tag causes a segmentation fault and crash. The reason is missing input validation in"}