This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2018-8828 →

DEBIAN-CVE-2018-8828

A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with...

Original description

The description as published by the source.

A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap-based buffer overflow in the tmx_check_pretran function in modules/tmx/tmx_pretran.c.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 kamailio

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-1"}]}]

Debian:13 kamailio

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-1"}]}]

Debian:14 kamailio

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-1"}]}]

References

advisory security-tracker.debian.org