CVE Feed

    Dashboard / CVE / CVE-2026-90779

    CVE-2026-90779

    SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process.

    Published:Sep 13, 2026
    Last Modified:Sep 14, 2026
    EPS:Sep 13, 2026
    EPSS Score:0.00565
    CVSS Score:7.5

    Affected Products

    Vendor
    Sipp
    Product
    Sipp

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-121 Stack-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-90780 (CVSS 8.7) — SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp…
    CVE-2026-90778 (CVSS 8.7) — SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To …
    CVE-2018-25356 (CVSS 8.6) — SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that all…
    CVE-2018-25225 (CVSS 8.6) — SIPP 3.3 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to e…
    CVE-2026-0710 (CVSS 8.4) — A flaw was found in SIPp. A remote attacker could exploit this by sending specially crafted Session Initiation…
    CVE-2008-1959 (CVSS 7.5) — Stack-based buffer overflow in the get_remote_video_port_media function in call.cpp in SIPp 3.0 allows remote …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High