telephony/net/kamailio-4.x
Sebastian Kemper 2387ec07a4 kamailio-4.x: add fix for CVE-2018-16657
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with
an invalid Via header causes a segmentation fault and crashes Kamailio. The
reason is missing input validation in the crcitt_string_array core function
for calculating a CRC hash for To tags. (An additional error is present in
the check_via_address core function: this function also misses input
validation.) This could result in denial of service and potentially the
execution of arbitrary code.

Patch from upstream. File paths amended for 4.x release.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-09-12 20:29:57 +02:00
..
files kamailio: add sleep time to init during restart 2014-12-21 14:24:38 +01:00
patches kamailio-4.x: add fix for CVE-2018-16657 2018-09-12 20:29:57 +02:00
Makefile kamailio-4.x: add fix for CVE-2018-16657 2018-09-12 20:29:57 +02:00