Tags › CVE-2018-8828

Kamailio: off-by-one heap overflow

• Authors:
  • Alfred Farrugia alfred@enablesecurity.com
  • Sandro Gauci sandro@enablesecurity.com
• Fixed versions: Kamailio v5.1.2, v5.0.6 and v4.4.7
• References: CVE-2018-8828
• Enable Security Advisory: https://www.enablesecurity.com/advisories/ES2018-05-kamailio-heap-overflow/
• Kamailio Security Advisory: https://www.kamailio.org/w/2018/03/kamailio-security-announcement-tmx-lcr/
• Tested vulnerable versions: 5.1.1, 5.1.0, 5.0.0
• Timeline:
  • Report date: 2018-02-10
  • Kamailio confirmed issue: 2018-02-10
  • Kamailio patch: 2018-02-10
  • Kamailio release with patch: 2018-03-01
  • Enable Security advisory: 2018-03-19

Description

A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap overflow.

Impact

Abuse of this vulnerability leads to denial of service in Kamailio. Further research may show that exploitation leads to remote code execution.