CVE-2013-7426

critical
Published 2017-08-29 · Modified 2026-05-13
CVSS v3
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4 NEW
not yet in upstream
VIR risk
9.8

Description

Insecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1.

Predictions

Exploit likelihood
97%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Debian Security Tracker · View original ↗ · DFSG

CVE-2013-7426 NameCVE-2013-7426 DescriptionInsecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1. SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) Debian Bugs712083 Vulnerable and fixed packages The table below lists information on source packages. Source…

CVE-2013-7426

NameCVE-2013-7426
DescriptionInsecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs712083

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
kamailio (PTS)bullseye5.4.4-1fixed
bookworm5.6.3-2fixed
trixie6.0.1-1+deb13u1fixed
forky6.1.2-1fixed
sid6.1.3-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
kamailiosource(unstable)4.0.2-1712083

Home - Debian Security - Source (Git)

OS impact

debian Debian Fixed 5 releases
VersionStatusFixed in
trixie Fixed 4.0.2-1
sid Fixed 4.0.2-1
forky Fixed 4.0.2-1
bullseye Fixed 4.0.2-1
bookworm Fixed 4.0.2-1

Application impact

VendorProductVersionsFixed
kamailiokamailio4.0.1-1

References

CWEs

CWE-434

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.