Lucene search
PRIOn knowledge basePRION:CVE-2016-2385HistoryApr 11, 2016 - 3:59 p.m.
Heap overflow
2016-04-1115:59:00
PRIOn knowledge base
www.prio-n.com
1
Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to cause a denial of service (memory corruption and process crash) or possibly execute arbitrary code via a large SIP packet.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 8.0 | |
| kamailio | le | 4.3.4 |
References
packetstormsecurity.com/files/136477/Kamailio-4.3.4-Heap-Overflow.html
www.debian.org/security/2016/dsa-3535
www.debian.org/security/2016/dsa-3537
www.kamailio.org/pub/kamailio/4.3.5/ChangeLog
www.securityfocus.com/archive/1/537926/100/0/threaded
census-labs.com/news/2016/03/30/kamailio-seas-heap-overflow/
github.com/kamailio/kamailio/commit/f50c9c853e7809810099c970780c30b0765b0643
www.exploit-db.com/exploits/39638/
Related
nvd
nvd
CVE-2016-2385
2016-04-11 15:59:05
debiancve
debiancve
CVE-2016-2385
2016-04-11 15:59:05
cve
cve
CVE-2016-2385
2016-04-11 15:59:05
openvas
openvas
Debian Security Advisory DSA 3535-1 (kamailio - security update)
2016-03-29 00:00:00
Debian: Security Advisory (DSA-3535-1)
2016-03-28 00:00:00
Kamailio < 4.3.5 SEAS module encode_msg Heap Buffer Overflow Vulnerability
2016-03-31 00:00:00
zdt
zdt
Kamailio 4.3.4 - Heap Based Buffer Overflow
2016-03-30 00:00:00
freebsd
freebsd
kamailio -- SEAS Module Heap overflow
2016-02-15 00:00:00
nessus
nessus
FreeBSD : kamailio -- SEAS Module Heap overflow (c428de09-ed69-11e5-92ce-002590263bf5)
2016-03-21 00:00:00
Debian DSA-3535-1 : kamailio - security update
2016-04-01 00:00:00
debian
debian
[SECURITY] [DSA 3535-1] kamailio security update
2016-03-29 21:14:13
ubuntucve
ubuntucve
CVE-2016-2385
2016-04-11 00:00:00
cvelist
cvelist
CVE-2016-2385
2016-04-11 15:00:00
exploitpack
exploitpack
Kamailio 4.3.4 - Heap Buffer Overflow
2016-03-30 00:00:00
exploitdb
exploitdb
Kamailio 4.3.4 - Heap Buffer Overflow
2016-03-30 00:00:00