[Spce-user] Security Announcement related to kamailio

[Andrew Pogrebennyk]

Hi Jon,

On 03/19/2018 02:00 PM, Jon Bonilla (Manwe) wrote:
>> A detailed description of the security issue is reported here: CVE link 
>> not yet assigned.
> 
> What's the issue description?

Please see
https://github.com/EnableSecurity/advisories/tree/master/ES2018-05-kamailio-heap-overflow
for the issue with t_precheck_trans().

As for the 2nd reported issue, there is only information from Henning:
https://lists.kamailio.org/pipermail/sr-users/2018-March/100705.html

Cheers,
Andrew

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 213 bytes
Desc: OpenPGP digital signature
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20180319/b97e5fc9/attachment-0001.asc>