83 matches found
CVE-2026-90779
A flaw was found in SIPp. A malicious Session Initiation Protocol SIP server can exploit this by sending a specially crafted SIP authentication challenge with oversized algorithm parameters. This can lead to a stack buffer overflow in the createAuthHeader function, causing the client process to...
CVE-2026-90780
A flaw was found in SIPp. An unauthenticated remote attacker could send specially crafted Session Initiation Protocol SIP messages with oversized headers. This could lead to a buffer overflow in the getheader function, causing the SIPp process to crash. This vulnerability results in a denial of...
CVE-2026-90778
A flaw was found in SIPp. Unauthenticated remote attackers can send crafted Session Initiation Protocol SIP messages with oversized tag parameters in the 'To' header. This can lead to a buffer overflow in the getpeertag function, allowing attackers to crash the SIPp process. This vulnerability...
CVE-2026-90780
SIPp through 3.7.7 contains a buffer overflow vulnerability in the getheader function in src/sipparser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated remote attackers can send crafted SIP messages with oversized headers to overflow the static buffer a...
CVE-2026-90778
SIPp through 3.7.7 contains a buffer overflow vulnerability in getpeertag function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the...
CVE-2026-90779
SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process...
EUVD-2026-77004
SIPp through 3.7.7 contains a buffer overflow vulnerability in the getheader function in src/sipparser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated remote attackers can send crafted SIP messages with oversized headers to overflow the static buffer a...
CVE-2026-90780 SIPp through 3.7.7 Buffer Overflow via Oversized SIP Header Content
SIPp through 3.7.7 contains a buffer overflow vulnerability in the getheader function in src/sipparser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated remote attackers can send crafted SIP messages with oversized headers to overflow the static buffer a...
CVE-2026-90780
SIPp through 3.7.7 contains a buffer overflow in the get_header() function within src/sip_parser.cpp. When processing SIP messages whose header content exceeds 20,490 bytes , an unauthenticated remote attacker can overflow a static buffer and crash the process , resulting in denial of service. Th...
EUVD-2026-77003
SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process...
CVE-2026-90779
SIPp through version 3.7.7 is affected by a stack buffer overflow in the createAuthHeader() function. The vulnerability is triggered when processing SIP authentication challenges (HTTP 401 or 407) containing oversized algorithm parameters , allowing a malicious SIP server to corrupt the stack and...
CVE-2026-90779 SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parameter
SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process...
CVE-2026-90778 SIPp through 3.7.7 Buffer Overflow via SIP To Header Tag
SIPp through 3.7.7 contains a buffer overflow vulnerability in getpeertag function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the...
EUVD-2026-77002
SIPp through 3.7.7 contains a buffer overflow vulnerability in getpeertag function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the...
CVE-2026-90778
SIPp through 3.7.7 is vulnerable to a buffer overflow in the get_peer_tag() function when processing SIP To headers containing tag parameters of 2049 bytes or more . Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow a static buffer and crash ...
PT-2026-90850
SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process...
PT-2026-90851
SIPp through 3.7.7 contains a buffer overflow vulnerability in the get header function in src/sip parser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated remote attackers can send crafted SIP messages with oversized headers to overflow the static buffer...
PT-2026-90849
SIPp through 3.7.7 contains a buffer overflow vulnerability in get peer tag function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the...
SUSE CVE-2018-25356
SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that allows local attackers to crash the application or execute arbitrary code. Attackers can trigger the vulnerability by supplying oversized input to the -3pcc, -i, or -logfile parameters,...
CVE-2018-25356
A flaw was found in SIPp. A local attacker can exploit a buffer overflow vulnerability by providing oversized input to command-line arguments, such as -3pcc, -i, or -logfile. This can lead to arbitrary code execution or cause the application to crash, resulting in a denial of service...