USN-7416-1: Kamailio vulnerabilities
First published: Mon Apr 07 2025(Updated: )
Stelios Tsampas discovered that Kamailio did not correctly handle certain memory operations, which could lead to a buffer overflow. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-2385) Henning Westerholt discovered that Kamailio did not correctly handle duplicated headers, which could lead to a segmentation fault. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-14767) It was discovered that Kamailio did not correctly handle parsing certain headers containing whitespace characters. An authenticated attacker could possibly use this issue to gain access to unauthorized resources and expose sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-28361)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/kamailio | <5.3.2-1ubuntu0.1~esm2 | 5.3.2-1ubuntu0.1~esm2 |
| Ubuntu | =20.04 | |
| All of | ||
| ubuntu/kamailio | <5.1.2-1ubuntu2+esm2 | 5.1.2-1ubuntu2+esm2 |
| Ubuntu | =18.04 | |
| All of | ||
| ubuntu/kamailio | <4.3.4-1.1ubuntu2.1+esm2 | 4.3.4-1.1ubuntu2.1+esm2 |
| Ubuntu | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the severity of USN-7416-1?
USN-7416-1 has a high severity as it involves a buffer overflow that can lead to denial of service or arbitrary code execution.
How do I fix USN-7416-1?
To fix USN-7416-1, you should update Kamailio to the latest patched version specific to your Ubuntu release.
Which versions of Kamailio are affected by USN-7416-1?
USN-7416-1 affects Kamailio versions prior to 5.3.2-1ubuntu0.1~esm2 for Ubuntu 20.04, 5.1.2-1ubuntu2+esm2 for Ubuntu 18.04, and 4.3.4-1.1ubuntu2.1+esm2 for Ubuntu 16.04.
Can USN-7416-1 lead to remote attacks?
Yes, USN-7416-1 can allow remote attackers to exploit the vulnerability, potentially leading to denial of service or code execution.
Is USN-7416-1 specific to any Ubuntu versions?
Yes, USN-7416-1 specifically affects Ubuntu 16.04 LTS, 18.04 LTS, and 20.04 LTS.
- agent/title
- agent/references
- agent/source
- agent/weakness
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/type
- agent/first-publish-date
- agent/description
- agent/event
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu
- version/ubuntu/20.04
- version/ubuntu/18.04
- version/ubuntu/16.04