Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Ubuntu 20.04: USN-7416-1 moderate: Kamailio Memory Issues

ubuntu
Calendar Grey April 7, 2025
Dist Ubuntu Esm H88
Multiple security weaknesses in Kamailio need prompt updates for Ubuntu versions 20.04, 18.04, and 16.04. Essential patches are now accessible.
Several security issues were fixed in Kamailio.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in Kamailio. Software Description: - kamailio: very fast, dynamic and configurable SIP server Details: Stelios Tsampas discovered that Kamailio did not correctly handle certain memory operations, which could lead to a buffer overflow. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-2385) Henning Westerholt discovered that Kamailio did not correctly handle duplicated headers, which could lead to a segmentation fault. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-14767) It was discovered that Kamailio did not correctly handle parsing certain h...

Read the Full Advisory

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS   kamailio                        5.3.2-1ubuntu0.1~esm2                                   Available with Ubuntu Pro Ubuntu 18.04 LTS   kamailio                        5.1.2-1ubuntu2+esm2                                   Available with Ubuntu Pro Ubuntu 16.04 LTS   kamailio                        4.3.4-1.1ubuntu2.1+esm2                                   Available with Ubuntu Pro After a standard system update you need to restart Kamailio to make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7416-1

  CVE-2016-2385, CVE-2018-14767, CVE-2020-28361

Ubuntu Security Notice USN-7416-1

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here