UBUNTU-CVE-2016-2385

Heap-based buffer overflow in the encodemsg function in encodemsg.c in the SEAS module in Kamailio formerly OpenSER and SER before 4.3.5 allows remote attackers to cause a denial of service memory corruption and process crash or possibly execute arbitrary code via a large SIP packet...

CVE-2016-2385

Heap-based buffer overflow in the encodemsg function in encodemsg.c in the SEAS module in Kamailio formerly OpenSER and SER before 4.3.5 allows remote attackers to cause a denial of service memory corruption and process crash or possibly execute arbitrary code via a large SIP packet...

CVE-2016-2385

CVE-2016-2385 describes a heap-based buffer overflow in Kamailio’s SEAS module (encode_msg.c) that can be triggered by oversized SIP packets, potentially leading to memory corruption, a process crash, or remote code execution. The vulnerability affects Kamailio versions prior to 4.3.5; the Fixed ...

CVE-2016-2385

Heap-based buffer overflow in the encodemsg function in encodemsg.c in the SEAS module in Kamailio formerly OpenSER and SER before 4.3.5 allows remote attackers to cause a denial of service memory corruption and process crash or possibly execute arbitrary code via a large SIP packet...

CVE-2016-2385

Heap-based buffer overflow in the encodemsg function in encodemsg.c in the SEAS module in Kamailio formerly OpenSER and SER before 4.3.5 allows remote attackers to cause a denial of service memory corruption and process crash or possibly execute arbitrary code via a large SIP packet...

Debian DSA-3535-1 : kamailio - security update

Stelios Tsampas discovered a buffer overflow in the Kamailio SIP proxy which might result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3535. The text...

Kamailio < 4.3.5 SEAS module encode_msg Heap Buffer Overflow Vulnerability

Kamailio is prone to a heap buffer overflow vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:kamailio:kamailio";...

Kamailio Detection (SIP)

SIP based detection of Kamailio. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.105591";...

Kamailio 4.3.4 - Heap Buffer Overflow

census ID: census-2016-0009 CVE ID: CVE-2016-2385 Affected Products: Kamailio 4.3.4 and possibly previous versions Class: Heap-based Buffer Overflow CWE-122 Remote: Yes Discovered by: Stelios Tsampas Kamailio successor of former OpenSER and SER is an Open Source SIP Server released under GPL, abl...

Kamailio 4.3.4 - Heap Based Buffer Overflow

Exploit for linux platform in category dos / poc CVE ID: CVE-2016-2385 Affected Products: Kamailio 4.3.4 and possibly previous versions Class: Heap-based Buffer Overflow CWE-122 Remote: Yes Discovered by: Stelios Tsampas Kamailio successor of former OpenSER and SER is an Open Source SIP Server...

kamailio SIP Proxy Buffer Overflow Vulnerability

kamailio is an open source GPL-based SIP Session Initiation Protocol, Session Initiation Protocol server developed by the FhG FOKUS Institute in Germany . A buffer overflow vulnerability exists in kamailio's SIP proxy. An attacker can exploit this vulnerability to execute arbitrary code...

Kamailio 4.3.4 - Heap Buffer Overflow

Kamailio 4.3.4 - Heap Buffer Overflow census ID: census-2016-0009 CVE ID: CVE-2016-2385 Affected Products: Kamailio 4.3.4 and possibly previous versions Class: Heap-based Buffer Overflow CWE-122 Remote: Yes Discovered by: Stelios Tsampas Kamailio successor of former OpenSER and SER is an Open...

[SECURITY] [DSA 3535-1] kamailio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3535-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 29, 2016 https://www.debian.org/security/faq -...

DSA-3535-1 kamailio - security update

Bulletin has no description...

Debian Security Advisory DSA 3535-1 (kamailio - security update)

Stelios Tsampas discovered a buffer overflow in the Kamailio SIP proxy which might result in the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb3535.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3535-1 using nvtgen 1.0 Script version: 1.0 Author:...

PT-2016-2693 · Kamailio +2 · Kamailio +2

Name of the Vulnerable Software and Affected Versions: Kamailio versions prior to 4.3.5 Description: The issue is related to a heap-based buffer overflow in the encode msg function, located in the encode msg.c file of the SEAS module. This overflow can be triggered by a large SIP packet, allowing...

Debian: Security Advisory (DSA-3535-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : kamailio -- SEAS Module Heap overflow (c428de09-ed69-11e5-92ce-002590263bf5)

Stelios Tsampas reports : A remotely exploitable heap overflow vulnerability was found in Kamailio v4.3.4. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidri...

kamailio -- SEAS Module Heap overflow

Stelios Tsampas reports: A remotely exploitable heap overflow vulnerability was found in Kamailio v4.3.4...

GNU Bash Environment Variable Handling RCE Vulnerability (Shellshock, SIP, CVE-2014-6271/CVE-2014-6278) - Active Check

GNU Bash is prone to a remote command execution RCE vulnerability dubbed Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...