# CVE-2018-16657: kamailio: In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentati... CVE-2018-16657 is fixed in 39 products on 1 platform, first by kamailio 5.1.2-1ubuntu2+esm1, released March 15, 2023. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2018-16657 - Priority: Routine - CVSS: n/a (Medium) - EPSS: 0.0358 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Sep 7, 2018 ## Description In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcitt_string_array core function for calculating a CRC hash for To tags. (An additional error is present in the check_via_address core function: this function also misses input validation.) This could result in denial of service and potentially the execution of arbitrary code. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | kamailio Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-autheph-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-autheph-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-autheph-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-berkeley-bin Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-berkeley-bin 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-berkeley-bin-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-berkeley-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-berkeley-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-berkeley-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-carrierroute-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-carrierroute-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-carrierroute-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-cnxcc-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-cnxcc-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-cnxcc-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-cpl-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-cpl-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-cpl-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-erlang-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-erlang-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-erlang-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-extra-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-extra-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-extra-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-geoip-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-geoip-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-geoip-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-geoip2-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-geoip2-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-geoip2-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-ims-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-ims-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-ims-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-json-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-json-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-json-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-kazoo-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-kazoo-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-kazoo-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-ldap-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-ldap-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-ldap-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-lua-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-lua-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-lua-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-memcached-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-memcached-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-memcached-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-mongodb-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-mongodb-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-mongodb-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-mono-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-mono-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-mono-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-mysql-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-mysql-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-mysql-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-outbound-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-outbound-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-outbound-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-perl-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-perl-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-perl-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-phonenum-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-phonenum-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-phonenum-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-postgres-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-postgres-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-postgres-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-presence-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-presence-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-presence-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-python-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-python-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-python-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-rabbitmq-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-rabbitmq-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-rabbitmq-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-radius-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-radius-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-radius-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-redis-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-redis-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-redis-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-sctp-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-sctp-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-sctp-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-snmpstats-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-snmpstats-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-snmpstats-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-sqlite-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-sqlite-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-sqlite-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-systemd-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-systemd-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-systemd-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-tls-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-tls-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-tls-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-unixodbc-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-unixodbc-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-unixodbc-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-utils-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-utils-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-utils-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-websocket-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-websocket-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-websocket-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-xml-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-xml-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-xml-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | | Linux | kamailio-xmpp-modules Ubuntu 18.04.6 LTS (bionic) | 5.1.2-1ubuntu2+esm1 | [kamailio-xmpp-modules 5.1.2-1ubuntu2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kamailio-xmpp-modules-5.1.2-1ubuntu2-esm1.md) | Mar 15, 2023 | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo