{"schemaVersion":3,"id":"USN-7416-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"kamailio vulnerabilities\n\nStelios Tsampas discovered that Kamailio did not correctly handle certain\nmemory operations, which could lead to a buffer overflow. A remote attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-2385)\n\nHenning Westerholt discovered that Kamailio did not correctly handle\nduplicated headers, which could lead to a segmentation fault. A remote\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS and\nUbuntu 18.04 LTS. (CVE-2018-14767)\n\nIt was discovered that Kamailio did not correctly handle parsing certain\nheaders containing whitespace characters. An authenticated attacker could\npossibly use this issue to gain access to unauthorized resources and\nexpose sensitive information. This issue only affected Ubuntu 18.04 LTS\nand Ubuntu 20.04 LTS. (CVE-2020-28361)","dates":{"published":"2025-04-07T01:35:36.000Z","modified":"2026-06-25T13:32:30.276Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"kamailio","name":"kamailio","label":"kamailio","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/kamailio","purlType":"deb","versions":[{"text":"< 4.3.4-1.1ubuntu2.1+esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 5.1.2-1ubuntu2+esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 5.3.2-1ubuntu0.1~esm2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.4-1.1ubuntu2.1+esm2 | < 5.1.2-1ubuntu2+esm2 | < 5.3.2-1ubuntu0.1~esm2","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7416-1","label":"ubuntu.com/security/notices/USN-7416-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-2385","label":"ubuntu.com/security/CVE-2016-2385","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-14767","label":"ubuntu.com/security/CVE-2018-14767","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2020-28361","label":"ubuntu.com/security/CVE-2020-28361","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2016-2385","CVE-2018-14767","CVE-2020-28361"],"downstream":[],"duplicates":[],"related":["CVE-2016-2385","CVE-2018-14767","CVE-2020-28361"]},"timeline":[{"kind":"published","date":"2025-04-07T01:35:36.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-25T13:32:30.276Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:15:41.048Z","stale":false,"partial":false}}