Lucene search
+L

9052 matches found

Cvelist
Cvelist
•added 2026/09/13 12:22 p.m.•43 views

CVE-2026-90781 alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-li...

4.8CVSS0.0017EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/09/13 12:22 p.m.•12 views

EUVD-2026-77008

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-li...

4.8CVSS6AI score0.0017EPSS
SaveExploits1References5
OSV
OSV
•added 2026/09/13 12:22 p.m.•22 views

CVE-2026-90781 alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-li...

4.8CVSS6.2AI score
SaveExploits0References7
Debian CVE
Debian CVE
•added 2026/09/13 12:22 p.m.•18 views

CVE-2026-90781

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-li...

4.8CVSS6AI score0.0017EPSS
SaveExploits1
NVD
NVD
•added 2026/09/13 12:17 p.m.•12 views

CVE-2026-90779

SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process...

8.7CVSS0.00802EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/13 11:42 a.m.•11 views

CVE-2026-90779 SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parameter

SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process...

8.7CVSS6AI score0.00802EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/13 11:42 a.m.•27 views

CVE-2026-90779 SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parameter

SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process...

8.7CVSS6.2AI score
SaveExploits0References7
CVE
CVE
•added 2026/09/13 11:42 a.m.•21 views

CVE-2026-90779

SIPp through version 3.7.7 is affected by a stack buffer overflow in the createAuthHeader() function. The vulnerability is triggered when processing SIP authentication challenges (HTTP 401 or 407) containing oversized algorithm parameters , allowing a malicious SIP server to corrupt the stack and...

8.7CVSS6AI score0.00802EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/13 11:42 a.m.•35 views

CVE-2026-90779 SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parameter

SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process...

8.7CVSS0.00802EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/13 11:42 a.m.•10 views

EUVD-2026-77003

SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process...

8.7CVSS6AI score0.00802EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/13 12:00 a.m.•20 views

PT-2026-90850

SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process...

8.7CVSS6AI score0.00802EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/13 12:00 a.m.•3 views

CVE-2026-90779: Stack-based Buffer Overflow

SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process...

8.7CVSS6.1AI score0.00802EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/13 12:00 a.m.•20 views

PT-2026-90856

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the snd ctl ascii elem id parse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or...

4.8CVSS6AI score0.0017EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/13 12:00 a.m.•2 views

CVE-2026-90781: Off-by-one Error

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-li...

4.8CVSS5.9AI score0.0017EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/09/13 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-90781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name...

4.8CVSS5.9AI score0.0017EPSS
SaveExploits1References4
OSV
OSV
•added 2026/09/12 6:16 p.m.•12 views

DEBIAN-CVE-2026-90558

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

9.3CVSS6.6AI score0.00879EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/12 6:16 p.m.•18 views

CVE-2026-90558

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

9.8CVSS0.00879EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/09/12 6:16 p.m.•20 views

CVE-2026-90558

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

9.8CVSS6.6AI score0.00879EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/12 6:16 p.m.•8 views

UBUNTU-CVE-2026-90558

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

9.8CVSS6.6AI score0.00879EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/12 6:06 p.m.•47 views

CVE-2026-90558 sngrep through 1.8.4 Stack Buffer Overflow via SIP Headers

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

9.8CVSS0.00879EPSS
SaveExploits0References5
Rows per page
Query Builder