diff --git a/kamailio/default.cfg b/kamailio/default.cfg index 2b87976..9c75912 100644 --- a/kamailio/default.cfg +++ b/kamailio/default.cfg @@ -392,17 +392,15 @@ route[CHECK_RETRANS] } } - -modparam("htable", "htable", "insane=>size=32;autoexpire=120;initval=0;updateexpire=1;") - route[SANITY_CHECK] { - if($sht(insane=>$si:$sp) > 3) { + ## CVE-2018-14767 + if($(hdr(To)[1]) != $null) { + xlog("second To header not null - dropping message"); drop; - }; + } if (!sanity_check()) { - $var(insane) = $shtinc(insane=>$si:$sp); xlog("L_WARN", "$ci|end|message from $si:$sp is insane ($var(insane))\n"); drop; }