CVE-2018-8828: Buffer Overflow
A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap-based buffer overflow in the tmxcheckpretran function in modules/tmx/tmxpretran.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/kamailioto a version that resolves this vulnerability.Fixed in 5.4.4-1Fixed in 5.6.3-2Fixed in 6.0.1-1+deb13u1Fixed in 6.1.3-2 - Upgrade
Upgrade
kamailioto a version that resolves this vulnerability.Fixed in 4.4.7 - Upgrade
Upgrade
kamailioto a version that resolves this vulnerability.Fixed in 5.0.6 - Upgrade
Upgrade
kamailioto a version that resolves this vulnerability.Fixed in 5.1.2
Event History
Frequently Asked Questions
What is the severity of CVE-2018-8828?
CVE-2018-8828 has been rated as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2018-8828?
To fix CVE-2018-8828, upgrade Kamailio to version 5.1.2-1 or a later version.
What versions of Kamailio are affected by CVE-2018-8828?
CVE-2018-8828 affects Kamailio versions prior to 4.4.7, 5.0.6, and 5.1.2.
What type of vulnerability is CVE-2018-8828?
CVE-2018-8828 is a buffer overflow vulnerability that can be triggered by specially crafted REGISTER messages.
Which operating systems are affected by CVE-2018-8828?
CVE-2018-8828 affects systems running vulnerable versions of Kamailio on both Ubuntu and Debian.