CVE-2018-8828

A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap-based buffer overflow in the tmxcheckpretran function in modules/tmx/tmx_pretran.c.

References

Affected packages

Git / github.com/kamailio/kamailio

Affected ranges

Type: GIT
Repo: https://github.com/kamailio/kamailio
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

e1d8008a09d9390ebaf698abe8909e10dfec4097

Introduced

28011aa9fdca7012103506d9a437c8e44dc8963c

Fixed

bf92f37d0b1bc02142c8e3a967510eb21fe31d65

Introduced

b07c9d6b4f46ab2e7666e148c646bf3e72b3a2fc

Fixed

1f0a7e501ae56353082ee3bcc1e1034148241271

Affected versions

5.*

5.0.0

5.0.1

5.0.2

5.0.3

5.0.4

5.0.5

5.1.0

5.1.1

Database specific

vanir_signatures

[
    {
        "id": "CVE-2018-8828-96b9e290",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/kamailio/kamailio/commit/e1d8008a09d9390ebaf698abe8909e10dfec4097",
        "target": {
            "file": "src/modules/tmx/tmx_pretran.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "202312855581435197133371407321087176701",
                "277043145890525527711492030391328171372",
                "78360990353905610262814467092084753475",
                "38820567475123698968890758151512420525"
            ]
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2018-8828-da97b9af",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/kamailio/kamailio/commit/e1d8008a09d9390ebaf698abe8909e10dfec4097",
        "target": {
            "function": "tmx_check_pretran",
            "file": "src/modules/tmx/tmx_pretran.c"
        },
        "digest": {
            "length": 5848.0,
            "function_hash": "294881891307122545872262304880529037414"
        },
        "signature_type": "Function"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8828.json"