Approved changes feed: RSS · Atom
cpe:2.3:a:sipp:sipp:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Sipp (5a780aee-d008-5902-bb02-d04ab9054c1d) |
|---|---|
| Product | Sipp (3ff9ecc2-2d39-5df0-add3-93921c98fa83) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/ctaloi/sipp |
purl2cpe | 2026-06-01 10:12:04.228862 |
pkg:github/sipp/sipp |
purl2cpe | 2026-06-01 10:12:04.228866 |
pkg:sourceforge/sipp |
purl2cpe | 2026-06-01 10:12:04.228869 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-90780 |
vulnerable | 2026-09-16 04:33:05.591856 |
SIPp through 3.7.7 Buffer Overflow via Oversized SIP Header Content
HIGH (7.5)
SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated remote attackers can send crafted SIP messages with oversized headers to overflow the static buffer and crash the process.
Published: 2026-09-13T11:42:29.104Z
Updated: 2026-09-24T14:22:00.064Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90779 |
vulnerable | 2026-09-16 04:33:05.537819 |
SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parameter
HIGH (7.5)
SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process.
Published: 2026-09-13T11:42:28.431Z
Updated: 2026-09-24T14:21:59.067Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90778 |
vulnerable | 2026-09-16 04:33:05.498717 |
SIPp through 3.7.7 Buffer Overflow via SIP To Header Tag
HIGH (7.5)
SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the process.
Published: 2026-09-13T11:42:27.756Z
Updated: 2026-09-24T14:21:58.116Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25356 |
vulnerable | 2026-06-08 05:11:29.835491 |
SIPp 3.6 Local Buffer Overflow via Command-line Arguments
HIGH (8.4)
SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that allows local attackers to crash the application or execute arbitrary code. Attackers can trigger the vulnerability by supplying oversized input to the -3pcc, -i, or -log_file parameters, causing strcpy to write beyond buffer boundaries in sipp.cpp.
Published: 2026-05-23T18:30:55.727Z
Updated: 2026-05-26T13:28:27.734Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25225 |
vulnerable | 2026-06-08 05:11:29.609683 |
SIPP 3.3 Stack-Based Buffer Overflow via Configuration File
HIGH (8.4)
SIPP 3.3 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplying malicious input in the configuration file. Attackers can craft a configuration file with oversized values that overflow a stack buffer, overwriting the return address and executing arbitrary code through return-oriented programming gadgets.
Published: 2026-03-28T11:58:17.188Z
Updated: 2026-03-30T14:07:37.759Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.