CVE-2018-16657: Null Pointer Dereference
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcittstringarray core function for calculating a CRC hash for To tags. (An additional error is present in the checkviaaddress core function: this function also misses input validation.) This could result in denial of service and potentially the execution of arbitrary code.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-16657?
CVE-2018-16657 has a severity rating that indicates a significant security risk due to the potential for segmentation faults and service crashes in Kamailio.
How do I fix CVE-2018-16657?
To fix CVE-2018-16657, update Kamailio to version 5.0.7 or later, or 5.1.4 or later.
What vulnerability does CVE-2018-16657 expose Kamailio to?
CVE-2018-16657 exposes Kamailio to crashes caused by crafted SIP messages with invalid Via headers.
Which versions of Kamailio are affected by CVE-2018-16657?
CVE-2018-16657 affects Kamailio versions before 5.0.7 and 5.1.x versions before 5.1.4.
What is the cause of the CVE-2018-16657 vulnerability in Kamailio?
The cause of CVE-2018-16657 is the missing input validation in the crcitt_string_array function, leading to segmentation faults.