CVE-2018-16657
kamailio: In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentati...
CVE-2018-16657 is fixed in 39 products on 1 platform, first by kamailio 5.1.2-1ubuntu2+esm1, released March 15, 2023. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0358
89th percentile
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcitt_string_array core function for calculating a CRC hash for To tags. (An additional error is present in the check_via_address core function: this function also misses input validation.) This could result in denial of service and potentially the execution of arbitrary code.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| kamailio · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-autheph-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-autheph-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-berkeley-bin · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-berkeley-bin 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-berkeley-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-berkeley-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-carrierroute-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-carrierroute-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-cnxcc-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-cnxcc-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-cpl-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-cpl-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-erlang-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-erlang-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-extra-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-extra-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-geoip-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-geoip-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-geoip2-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-geoip2-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-ims-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-ims-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-json-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-json-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-kazoo-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-kazoo-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-ldap-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-ldap-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-lua-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-lua-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-memcached-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-memcached-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-mongodb-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-mongodb-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-mono-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-mono-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-mysql-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-mysql-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-outbound-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-outbound-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-perl-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-perl-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-phonenum-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-phonenum-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-postgres-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-postgres-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-presence-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-presence-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-python-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-python-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-rabbitmq-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-rabbitmq-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-radius-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-radius-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-redis-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-redis-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-sctp-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-sctp-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-snmpstats-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-snmpstats-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-sqlite-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-sqlite-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-systemd-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-systemd-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-tls-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-tls-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-unixodbc-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-unixodbc-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-utils-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-utils-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-websocket-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-websocket-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-xml-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-xml-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |
| kamailio-xmpp-modules · Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | kamailio-xmpp-modules 5.1.2-1ubuntu2+esm1 | Mar 15, 2023 |