CVE-2026-90779: SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parameter
SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
SIPp installations through version 3.7.7 are exposed when they process SIP authentication challenges from a malicious SIP server. The affected path is reached by crafted 401 or 407 responses containing an oversized algorithm parameter.
What does an attacker need to exploit it?
An attacker needs to operate or control a SIP server that can send a crafted 401 or 407 authentication challenge to the SIPp client. No authentication or user interaction is required according to the supplied severity vector.
What is the expected impact of successful exploitation?
The crafted challenge can corrupt the SIPp client stack and crash the client process, resulting in a denial of service. The provided vector indicates no stated confidentiality or integrity impact.
How can I determine whether an incident may have occurred?
Review SIPp client crashes occurring after receipt of SIP 401 or 407 authentication challenges, particularly from untrusted or unexpected SIP servers. The relevant requests contain an oversized algorithm parameter in the authentication challenge.