Test ID:	1.3.6.1.4.1.25623.1.0.105592
Category:	Buffer overflow
Title:	Kamailio < 4.3.5 SEAS module encode_msg Heap Buffer Overflow Vulnerability
Summary:	Kamailio is prone to a heap buffer overflow vulnerability.
Description:	Summary: Kamailio is prone to a heap buffer overflow vulnerability. Vulnerability Insight: The heap overflow can be triggered if Kamailio is configured to use the SEAS module. Vulnerability Impact: An attacker may exploit this issue to cause a denial-of-service condition. Affected Software/OS: Kamailio version prior to 4.3.5 with an enabled SEAS module. Solution: Update to version 4.3.5 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2385 Bugtraq: 20160330 CVE-2016-2385 Kamailio SEAS module heap buffer overflow (Google Search) http://www.securityfocus.com/archive/1/537926/100/0/threaded Debian Security Information: DSA-3535 (Google Search) http://www.debian.org/security/2016/dsa-3535 Debian Security Information: DSA-3537 (Google Search) http://www.debian.org/security/2016/dsa-3537 https://www.exploit-db.com/exploits/39638/ http://packetstormsecurity.com/files/136477/Kamailio-4.3.4-Heap-Overflow.html https://census-labs.com/news/2016/03/30/kamailio-seas-heap-overflow/
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.