{
  "cveId": "CVE-2018-16657",
  "url": "https://patchblox.com/security/cve/CVE-2018-16657",
  "summary": "CVE-2018-16657 is fixed in 39 products on 1 platform, first by kamailio 5.1.2-1ubuntu2\u002Besm1, released March 15, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "kamailio: In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentati...",
  "description": "In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcitt_string_array core function for calculating a CRC hash for To tags. (An additional error is present in the check_via_address core function: this function also misses input validation.) This could result in denial of service and potentially the execution of arbitrary code.",
  "published": "2018-09-07T07:29:00Z",
  "severity": "Medium",
  "epss": 0.03581,
  "epssPercentile": 0.89459,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "kamailio",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-autheph-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-autheph-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-autheph-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-berkeley-bin",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-berkeley-bin 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-berkeley-bin-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-berkeley-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-berkeley-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-berkeley-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-carrierroute-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-carrierroute-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-carrierroute-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-cnxcc-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-cnxcc-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-cnxcc-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-cpl-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-cpl-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-cpl-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-erlang-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-erlang-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-erlang-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-extra-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-extra-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-extra-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-geoip-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-geoip-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-geoip-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-geoip2-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-geoip2-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-geoip2-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-ims-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-ims-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-ims-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-json-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-json-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-json-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-kazoo-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-kazoo-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-kazoo-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-ldap-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-ldap-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-ldap-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-lua-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-lua-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-lua-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-memcached-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-memcached-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-memcached-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-mongodb-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-mongodb-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-mongodb-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-mono-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-mono-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-mono-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-mysql-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-mysql-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-mysql-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-outbound-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-outbound-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-outbound-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-perl-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-perl-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-perl-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-phonenum-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-phonenum-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-phonenum-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-postgres-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-postgres-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-postgres-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-presence-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-presence-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-presence-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-python-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-python-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-python-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-rabbitmq-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-rabbitmq-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-rabbitmq-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-radius-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-radius-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-radius-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-redis-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-redis-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-redis-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-sctp-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-sctp-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-sctp-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-snmpstats-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-snmpstats-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-snmpstats-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-sqlite-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-sqlite-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-sqlite-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-systemd-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-systemd-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-systemd-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-tls-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-tls-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-tls-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-unixodbc-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-unixodbc-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-unixodbc-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-utils-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-utils-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-utils-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-websocket-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-websocket-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-websocket-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-xml-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-xml-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-xml-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "kamailio-xmpp-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.1.2-1ubuntu2\u002Besm1",
      "fix": "kamailio-xmpp-modules 5.1.2-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kamailio-xmpp-modules-5.1.2-1ubuntu2-esm1",
      "released": "2023-03-15T13:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}