Back to Database
Status published
Critical
CVE-2018-8828
A Buffer Overflow issue was discovered in Kamailio before 4.4.7,...
Vulnerability Description
A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap-based buffer overflow in the tmx_check_pretran function in modules/tmx/tmx_pretran.c.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-8828
Credits & Attribution
No credits recorded in the NVD database.
References
More from kamailio
View All →CVE-2020-28361
Kamailio before 5.4.0, as used in Sip Express Router (SER)...
Medium
5.4
CVE-2020-27507
The Kamailio SIP before 5.5.0 server mishandles INVITE requests with...
Unknown
0
CVE-2015-1591
The kamailio build in kamailio before 4.2.0-2 process allows local...
High
7.8
CVE-2015-1590
The kamcmd administrative utility and default configuration in kamailio before...
High
7.8
CVE-2013-7426
Insecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1....
Critical
9.8
Affected Vendor
kamailio
View all reports →Affected Software
kamailio, debian linux
Vulnerable Versions:
0, 5.0.0, 5.1.0, 8.0, 9.0
Timeline
Official Publish:
March 20th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.