Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to cause a denial of service (memory corruption and process crash) or possibly execute arbitrary code via a large SIP packet.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade kamailio | Aug 30, 2017 | Apr 11, 2016 |
| Debian | — | Upgrade kamailio | Apr 7, 2016 | Mar 29, 2016 |
| Freebsd | — | Upgrade kamailio | Dec 10, 2025 | Mar 19, 2016 |
| Ubuntu | — | Upgrade kamailio (Ubuntu Pro) | Apr 7, 2025 | Apr 11, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub