CVE-2026-90558
Received Received - Intake

sngrep Stack Buffer Overflow in SIP Header Parsing

Publication date: 2026-09-12

Last updated on: 2026-09-12

Assigner: VulnCheck

Description
sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause crashes or execute arbitrary code during packet parsing and rendering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-12
Last Modified
2026-09-12
Generated
2026-09-12
AI Q&A
2026-09-12
EPSS Evaluated
N/A
NVD
CVE-2026-90558
EUVD
EUVD-2026-76903

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
irontec sngrep to 1.8.4 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

sngrep through 1.8.4 has a stack buffer overflow in SIP attribute formatting routines. When SIP header values like Call-ID or X-Call-ID exceed 255 bytes, attackers can craft malicious packets to overflow stack buffers. This may cause crashes or arbitrary code execution during packet parsing and rendering.

Detection Guidance

Monitor SIP traffic for oversized headers like Call-ID or X-Call-ID exceeding 255 bytes. Use tools like Wireshark or tcpdump to capture and inspect SIP packets. Check sngrep logs for crashes or malformed SIP messages during parsing.

Impact Analysis

This vulnerability allows remote attackers to crash the sngrep application or execute arbitrary code by sending specially crafted SIP packets. If sngrep is used to monitor VoIP traffic, exploitation could lead to denial of service or compromise of systems processing SIP traffic.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling unauthorized code execution or crashes in systems processing SIP traffic. Exploitation may lead to data breaches, unauthorized access, or service disruptions, which are critical violations under these regulations. The lack of input validation for SIP headers could result in unauthorized data exposure or system compromise.

Mitigation Strategies
  • Upgrade sngrep to a patched version beyond 1.8.4 where the buffer overflow issue is fixed.
  • Implement network-level protections to filter or block malformed SIP packets with oversized headers.
  • Monitor for unusual SIP traffic patterns that may indicate exploitation attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-90558. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart