CVE-2018-16657: debian debian_linux NULL Pointer Dereference
Vulnerability summary
CVE-2018-16657 is a critical (CVSS 9.8) NULL Pointer Dereference vulnerability in debian debian_linux. EPSS estimates a 3.58% chance of exploitation in the next 30 days, higher than 89.2% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 07-09-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcitt_string_array core function for calculating a CRC hash for To tags. (An additional error is present in the check_via_address core function: this function also misses input validation.) This could result in denial of service and potentially the execution of arbitrary code.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
3.58%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.58% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (skalatan.de)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian2 products
- kamailio< 5.1.4-1 | < 4.4.4-2+deb9u3 | < 4.2.0-2+deb8u5
- debian_linuxEOL8.0 | 9.0
Kamailio1 product
- kamailio< 5.0.7 | ≥ 5.1.0, < 5.1.4
Ubuntu1 product
- kamailio< 4.3.4-1.1ubuntu2.1+esm1 | < 5.1.2-1ubuntu2+esm1
3 vendors · 4 products
References
10 links
- lists.debian.org/debian-lts-announce/2018/09/msg00013.htmlMailing ListX Refsource MLISTThird Party Advisory