CVE-2016-2385
CriticalSummary
A heap-based buffer overflow in the SEAS module in Kamailio before version 4.3.5 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a large SIP packet.
Risk Assessment
Attackers can exploit this vulnerability to disrupt service or gain control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade Kamailio to version 4.3.5 or later to mitigate this vulnerability and to monitor SIP traffic for potential attack attempts.
Original NVD description (English source)
Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to cause a denial of service (memory corruption and process crash) or possibly execute arbitrary code via a large SIP packet.