CVE-2018-14767
kamailio: In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" ta...
CVE-2018-14767 is fixed in 39 products on 1 platform, first by kamailio 5.1.2-1ubuntu2+esm2, released November 18, 2020. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.2930
98th percentile
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in the "build_res_buf_from_sip_req" core function. This could result in denial of service and potentially the execution of arbitrary code.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| kamailio · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-autheph-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-autheph-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-berkeley-bin · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-berkeley-bin 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-berkeley-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-berkeley-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-carrierroute-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-carrierroute-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-cnxcc-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-cnxcc-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-cpl-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-cpl-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-erlang-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-erlang-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-extra-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-extra-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-geoip-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-geoip-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-geoip2-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-geoip2-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-ims-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-ims-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-json-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-json-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-kazoo-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-kazoo-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-ldap-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-ldap-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-lua-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-lua-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-memcached-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-memcached-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-mongodb-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-mongodb-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-mono-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-mono-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-mysql-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-mysql-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-outbound-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-outbound-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-perl-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-perl-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-phonenum-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-phonenum-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-postgres-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-postgres-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-presence-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-presence-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-python-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-python-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-rabbitmq-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-rabbitmq-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-radius-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-radius-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-redis-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-redis-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-sctp-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-sctp-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-snmpstats-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-snmpstats-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-sqlite-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-sqlite-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-systemd-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-systemd-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-tls-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-tls-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-unixodbc-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-unixodbc-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-utils-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-utils-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-websocket-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-websocket-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-xml-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-xml-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |
| kamailio-xmpp-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm2 | kamailio-xmpp-modules 5.1.2-1ubuntu2+esm2 | Nov 18, 2020 |