Lucene search
+L

6 matches found

SUSE CVE
SUSE CVE
•added 2026/09/15 12:56 a.m.•12 views

SUSE CVE-2026-90558

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

9.8CVSS6.7AI score0.00879EPSS
SaveExploits0References3
Mend
Mend
•added 2026/09/12 6:06 p.m.•5 views

CVE-2026-90558

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

9.8CVSS6.7AI score0.00879EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/12 12:00 a.m.•9 views

CVE-2026-90558: Stack-based Buffer Overflow

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

9.8CVSS6.7AI score0.00879EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•28 views

EUVD-2024-31721

Malicious code in bioql PyPI...

9.8CVSS7.9AI score0.018EPSS
SaveExploits0References3
osv-ubuntu
osv-ubuntu
•added 2024/04/10 12:15 a.m.•16 views

UBUNTU-CVE-2024-3119

A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions sipgetcallid and sipgetxcallid in sip.c use the strncpy function to copy header contents into fixed-size buffers without checking the dat...

9.8CVSS6.5AI score0.018EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/04/09 11:55 p.m.•27 views

CVE-2024-3119 Stack-Buffer Overflow in 'Call-ID' and 'X-Call-ID' SIP Header Processing in sngrep

A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions sipgetcallid and sipgetxcallid in sip.c use the strncpy function to copy header contents into fixed-size buffers without checking the dat...

9CVSS8.2AI score0.018EPSS
SaveExploits0References3
Rows per page
Query Builder