A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap-based buffer overflow in the tmx_check_pretran function in modules/tmx/tmx_pretran.c.
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kamailio | Kamailio | * | 4.4.7 (excluding) |
| Kamailio | Kamailio | 5.0.0 (including) | 5.0.6 (excluding) |
| Kamailio | Kamailio | 5.1.0 (including) | 5.1.2 (excluding) |