oss-security - CVE Request: Kamailio 4.3.4 SEAS Module Heap overflow

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <56C1AD6C.1030902@census-labs.com>
Date: Mon, 15 Feb 2016 12:50:20 +0200
From: Stelios Tsampas <stelios@...sus-labs.com>
To: oss-security@...ts.openwall.com
Cc: miconda@...il.com, oriolc@...tele.com, jesusr@...tele.com
Subject: CVE Request: Kamailio 4.3.4 SEAS Module Heap overflow

Hello all,

a (remotely exploitable) heap overflow vulnerability was found in
Kamailio v4.3.4. We have notified the developers and they have addressed
this through commit:
https://github.com/kamailio/kamailio/commit/f50c9c853e7809810099c970780c30b0765b0643.

Could we have a CVE number for this please? A separate advisory will
follow with the technical details of the bug, referencing the CVE number.

Thank you,

Stelios Tsampas

IT Security Researcher
CENSUS S.A.

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.