A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap-based buffer overflow in the tmx_check_pretran function in modules/tmx/tmx_pretran.c.
| Software | From | Fixed in |
|---|---|---|
| kamailio / kamailio | - | 4.4.7 |
| kamailio / kamailio | 5.0.0 | 5.0.6 |
| kamailio / kamailio | 5.1.0 | 5.1.2 |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 9.0 | 9.0.x |