Critical severity9.8OSV Advisory· Published Mar 20, 2018· Updated Jun 17, 2026

CVE-2018-8828

Description

A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap-based buffer overflow in the tmx_check_pretran function in modules/tmx/tmx_pretran.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Kamailio/KamailioOSV2 versions
3.0_pre1, 4.4.0, 4.4.1, …+ 1 more
- (no CPE)range: 3.0_pre1, 4.4.0, 4.4.1, …
- (no CPE)range: <4.4.7, >=5.0.0 <5.0.6, >=5.1.0 <5.1.2

Patches

Vulnerability mechanics

References

github.com/kamailio/kamailio/commit/e1d8008a09d9390ebaf698abe8909e10dfec4097nvdPatchThird Party Advisory
github.com/EnableSecurity/advisories/tree/master/ES2018-05-kamailio-heap-overflownvdThird Party Advisory
www.debian.org/security/2018/dsa-4148nvdThird Party Advisory
usn.ubuntu.com/4240-1/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.025
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000