vendor:
Kamailio
by:
Alfred Farrugia, Sandro Gauci
CVSS
HIGH
Heap Overflow
119
CWE
Product Name: Kamailio
Affected Version From: 5.1.1
Affected Version To: 5.0.0
Patch Exists: YES
Related CWE: No CVE assigned yet
CPE: None
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: None
2018
Off-by-one heap overflow in Kamailio
A specially crafted REGISTER message with a malformed `branch` or `From tag` triggers an off-by-one heap overflow.
Mitigation:
Upgrade to Kamailio v5.1.2, v5.0.6 and v4.4.7
