{"id":"CVE-2018-8828","details":"A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap-based buffer overflow in the tmx_check_pretran function in modules/tmx/tmx_pretran.c.","modified":"2026-07-08T20:05:00.570439Z","published":"2018-03-20T20:29:00.350Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"]}]},"references":[{"type":"WEB","url":"https://usn.ubuntu.com/4240-1/"},{"type":"ADVISORY","url":"https://github.com/EnableSecurity/advisories/tree/master/ES2018-05-kamailio-heap-overflow"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4148"},{"type":"FIX","url":"https://github.com/kamailio/kamailio/commit/e1d8008a09d9390ebaf698abe8909e10dfec4097"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kamailio/kamailio","events":[{"introduced":"0"},{"fixed":"35d8ab2a9641c63c5e7493c83f93f232b5a643c4"},{"introduced":"b07c9d6b4f46ab2e7666e148c646bf3e72b3a2fc"},{"fixed":"1f0a7e501ae56353082ee3bcc1e1034148241271"},{"introduced":"28011aa9fdca7012103506d9a437c8e44dc8963c"},{"fixed":"bf92f37d0b1bc02142c8e3a967510eb21fe31d65"},{"fixed":"e1d8008a09d9390ebaf698abe8909e10dfec4097"}],"database_specific":{"cpe":"cpe:2.3:a:kamailio:kamailio:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"4.4.7"},{"introduced":"5.0.0"},{"fixed":"5.0.6"},{"introduced":"5.1.0"},{"fixed":"5.1.2"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["5.1.1","5.0.5","5.1.0","5.0.4","5.0.3","4.4.6","5.0.2","5.0.1","5.0.0","4.4.5","4.4.4","4.4.3","4.4.2","4.4.1","4.4.0","sr_3.1_freeze","3.0_pre1","sr_before_modules_merge","before_dest_info_changes_2","before_tm_timers","new_timers","before_new_timers","tmp_pcl_tag_17368Js8","after_0_9_4_pkg_merge","last_merge_to_janakj","rel_0_9_0_root","after_makefile_merges","before_malloc_changes","before_db_api_changes","after_testing_0_8_12_r1_merge","before_testing_0_8_12_r1_merge","after_testing_0_8_12_r0_merge","before_testing_0_8_12_r0_merge","before_tcp_port_aliases","before_socket_info_lists","before_lumps_split","testing_0_8_12_root","v0_8_13dev-t16","v0_8_12dev_t13","v0_8_12dev_t05","v0_8_12dev-t03","v0_8_12_t02_merged_w_v0_8_11pre35","v0_8_11dev34","rel_0_8_11_root","v0_8_11pre29-prerelease-cd","v0_8_11pre29-prerelease","v0_8_11pre29","pre22","bflmpsvz","before_kill_repl_add_rm","v0_8_11_pre9","mem-fixes","v0_8_11pre8","old_mod_iface","after_xl","before_replication_patch","before_xl","pre6-tcp4","pre6-tcp5-tm","tcp2","wo_sp","post-zt","pre-zt","ser_0_8_10","ser_0_8_10_pre5","ser_0_8_10_pre4","ser_0_8_10_pre2","ser_0_8_10_pre3","myself_port_lo","new_hash","ser_0_8_9-release","ser_0_8_9","ser_0_8_8-final-cd-release","v0_8_8","fixstats","pre_fixstats","gpled","pregpl","listen_ifs","before_str2ip_changes","budvar","bigbang","pre-bigbang","srv","ipv6","ipv4_working","ser_0_8_7-0-unstable","ser_0_8_6-6-beer-release","ser_0_8_6-5-stable","ser_0-8-6-4","bogdan_final_version","ser_0839_errors","ser_0_8_3_2","ser_0_8_3_1","sip_083","ser_082","ser_081-plugins","sip_pre-plugin","ser_0_7","new_cfg_compiles","sr_simpleconfig","v03","v0_2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8828.json","vanir_signatures_modified":"2026-07-08T20:05:00Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["202312855581435197133371407321087176701","277043145890525527711492030391328171372","78360990353905610262814467092084753475","38820567475123698968890758151512420525"],"threshold":0.9},"id":"CVE-2018-8828-96b9e290","signature_type":"Line","signature_version":"v1","source":"https://github.com/kamailio/kamailio/commit/e1d8008a09d9390ebaf698abe8909e10dfec4097","target":{"file":"src/modules/tmx/tmx_pretran.c"}},{"target":{"file":"src/modules/tmx/tmx_pretran.c","function":"tmx_check_pretran"},"deprecated":false,"digest":{"function_hash":"294881891307122545872262304880529037414","length":5848},"id":"CVE-2018-8828-da97b9af","signature_type":"Function","signature_version":"v1","source":"https://github.com/kamailio/kamailio/commit/e1d8008a09d9390ebaf698abe8909e10dfec4097"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}