CVE-2026-90778
Received Received - Intake

Buffer Overflow in SIPp Due to Oversized SIP To Header Tags

Publication date: 2026-09-13

Last updated on: 2026-09-13

Assigner: VulnCheck

Description
SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-13
Last Modified
2026-09-13
Generated
2026-09-13
AI Q&A
2026-09-13
EPSS Evaluated
N/A
NVD
CVE-2026-90778
EUVD
EUVD-2026-77002

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sipp sipp 3.7.7

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-90778 is a buffer overflow vulnerability in SIPp through version 3.7.7. It occurs in the get_peer_tag() function when processing SIP To headers with tag parameters of 2049 bytes or more. The function copies the tag into a static 2049-byte buffer without bounds checking, allowing unauthenticated remote attackers to send crafted SIP messages that overflow the buffer and crash the process.

Detection Guidance

To detect this vulnerability, monitor SIP traffic for malformed To headers with tag parameters exceeding 2049 bytes. Use network sniffing tools like tcpdump or Wireshark to capture SIP messages and inspect header lengths. Check SIPp logs for crashes or buffer overflow errors when processing SIP responses.

Impact Analysis

This vulnerability allows unauthenticated remote attackers to crash the SIPp application by sending specially crafted SIP messages. The crash could lead to denial of service, disrupting SIP-based communication services that rely on SIPp for testing or operation.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by enabling denial-of-service attacks that disrupt VoIP services handling sensitive communications. Buffer overflows may lead to service unavailability, potentially violating availability requirements in GDPR Article 32 and HIPAA Security Rule §164.308(a)(7).

Mitigation Strategies

Immediately update SIPp to the patched version via Pull Request #879 or the commit ddf22d1. If updating is not possible, filter or block SIP messages with To headers containing tag parameters larger than 2048 bytes at the network perimeter. Disable SIPp if not essential until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-90778. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart