Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to cause a denial of service (memory corruption and process crash) or possibly execute arbitrary code via a large SIP packet.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
kamailio SEAS模块基于堆的缓冲区溢出
Vulnerability Description
kamailio(前称OpenSER and SER)是德国FhG FOKUS研究所研发的一款开源基于GPL的SIP(Session Initiation Protocol,会话初始协议)服务器。SEAS是其中的一个模块。 Kamailio 4.3.5之前版本的SEAS模块中的encode_msg.c文件中的‘encode_msg’函数存在基于堆的缓冲区溢出。远程攻击者可通过发送较大的SIP数据包利用该漏洞造成拒绝服务(内存损坏和进程崩溃),或执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A