Summary
It was discovered that Kamailio did not properly sanitize SIP messages under
certain circumstances. An attacker could use this vulnerability to cause a
denial of service or possibly execute arbitrary code. This issue only affected
Ubuntu 16.04 ESM and 18.04 ESM. (CVE-2018-16657)
It was discovered that Kamailio did not properly validate INVITE requests
under certain circumstances. An attacker could use this vulnerability to
cause a denial of service or possibly execute arbitrary code. (CVE-2020-27507)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | kamailio | 4.3.4-1.1ubuntu2.1+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | kamailio | 5.1.2-1ubuntu2+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | kamailio | 5.3.2-1ubuntu0.1~esm1 |
Vulnerabilities 2
-
Critical 9.8
The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a…
-
Unscored —
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation…