Логотип exploitDog
bind:CVE-2018-14767
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2018-14767

Количество 4

Количество 4

ubuntu логотип

CVE-2018-14767

больше 7 лет назад

In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in the "build_res_buf_from_sip_req" core function. This could result in denial of service and potentially the execution of arbitrary code.

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2018-14767

больше 7 лет назад

In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in the "build_res_buf_from_sip_req" core function. This could result in denial of service and potentially the execution of arbitrary code.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2018-14767

больше 7 лет назад

In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message ...

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-v76g-6p6j-7485

больше 3 лет назад

In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in the "build_res_buf_from_sip_req" core function. This could result in denial of service and potentially the execution of arbitrary code.

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2018-14767

In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in the "build_res_buf_from_sip_req" core function. This could result in denial of service and potentially the execution of arbitrary code.

CVSS3: 9.8
1%
Низкий
больше 7 лет назад
nvd логотип
CVE-2018-14767

In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in the "build_res_buf_from_sip_req" core function. This could result in denial of service and potentially the execution of arbitrary code.

CVSS3: 9.8
1%
Низкий
больше 7 лет назад
debian логотип
CVE-2018-14767

In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message ...

CVSS3: 9.8
1%
Низкий
больше 7 лет назад
github логотип
GHSA-v76g-6p6j-7485

In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in the "build_res_buf_from_sip_req" core function. This could result in denial of service and potentially the execution of arbitrary code.

CVSS3: 9.8
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу