oss-sec mailing list archives

CVE Request: Kamailio 4.3.4 SEAS Module Heap overflow


From: Stelios Tsampas <stelios () census-labs com>
Date: Mon, 15 Feb 2016 12:50:20 +0200

Hello all,

a (remotely exploitable) heap overflow vulnerability was found in
Kamailio v4.3.4. We have notified the developers and they have addressed
this through commit:
https://github.com/kamailio/kamailio/commit/f50c9c853e7809810099c970780c30b0765b0643.

Could we have a CVE number for this please? A separate advisory will
follow with the technical details of the bug, referencing the CVE number.

Thank you,

Stelios Tsampas

IT Security Researcher
CENSUS S.A.


Current thread: