{"action":"Upgrade kamailio to 5.1.4-1 or later.","affected":[{"fixed":"5.1.4-1","introduced":"0"}],"component":"kamailio","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["5.1.4-1"],"id":"tcs_01M5ND39P0TWXGTX6MFB6RBXCP","modified_at":"2026-10-23T18:03:54.928608993Z","published_at":"2018-07-31T06:29:00.227Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2018-14767","https://security-tracker.debian.org/tracker/CVE-2018-14767"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2018-14767","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2018-14767"}],"summary":"In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double \"To\" header and an empty \"To\" tag causes a segmentation fault and crash. The reason is missing input validation in"}