CVE-2016-2385: Buffer Overflow
Published Apr 11, 2016
·Updated
Heap-based buffer overflow in the encodemsg function in encodemsg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to cause a denial of service (memory corruption and process crash) or possibly execute arbitrary code via a large SIP packet.
Affected Software
3 affected componentsFixes available
Debian Debian Linux=8.0
kamailio Kamailio<=4.3.4
debian/kamailio
5.4.4-15.6.3-26.0.1-1
Event History
Apr 11, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:59 PM
DescriptionSeverityWeaknessAffected Software
Apr 11, 2025
Data Sourced
via Ubuntu·03:36 AM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·03:37 AM
Description
Data Sourced
via Debian·03:37 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-2385?
CVE-2016-2385 is classified as a high severity vulnerability due to its potential for denial of service and arbitrary code execution.
2
How do I fix CVE-2016-2385?
To fix CVE-2016-2385, upgrade Kamailio to version 4.3.5 or later.
3
Which versions of Kamailio are affected by CVE-2016-2385?
CVE-2016-2385 affects Kamailio versions prior to 4.3.5.
4
Can CVE-2016-2385 be exploited remotely?
Yes, CVE-2016-2385 can be exploited remotely via a specially crafted SIP packet.
5
What type of attack does CVE-2016-2385 facilitate?
CVE-2016-2385 facilitates attacks that can lead to memory corruption and process crashes.