Kamailio SIP Server REGISTER Message Heap Buffer Overflow

Strike ID:
E18-m9c11
CVSS:
9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
False Positive:
f
Variants:
1
Year:
2018

Description

This strike exploits a heap overflow vulnerability within tmx_check_pretran function of modules/tmx/tmx_pretran.c, pertaining to the Kamailio SIP server. This vulnerability is due to insufficient sanitization of the input passed to the "From" tag. An attacker can exploit this vulnerability by sending a specially crafted SIP REGISTER request containing a header with a "From" tag. Successful exploitation may result in arbitrary code execution or denial of service.

CVE

References