Vulnerability Description
SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated remote attackers can send crafted SIP messages with oversized headers to overflow the static buffer and crash the process.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/SIPp/sipp
- https://github.com/SIPp/sipp/blob/v3.7.7/src/sip_parser.cpp#L164-L227
- https://github.com/SIPp/sipp/commit/8ddfb43359703e665041a955543e07f504f80232
- https://github.com/SIPp/sipp/pull/881
- https://www.vulncheck.com/advisories/sipp-through-3.7.7-buffer-overflow-via-over
FAQ
What is CVE-2026-90780?
CVE-2026-90780 is a vulnerability with a CVSS score of 7.5 (HIGH). SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated ...
How severe is CVE-2026-90780?
CVE-2026-90780 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-90780?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.