CVE-2026-90780: SIPp through 3.7.7 Buffer Overflow via Oversized SIP Header Content
SIPp through 3.7.7 contains a buffer overflow vulnerability in the getheader() function in src/sipparser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated remote attackers can send crafted SIP messages with oversized headers to overflow the static buffer and crash the process.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any unauthenticated remote attacker able to send SIP messages to a vulnerable SIPp instance can attempt exploitation. No user interaction or prior privileges are required.
What is the practical impact?
A crafted SIP message with header content exceeding 20,490 bytes can overflow a static buffer in get_header() and crash the SIPp process, causing a denial of service.
Which deployments are affected?
SIPp versions through 3.7.7 are affected when they process attacker-supplied SIP messages. The issue is reachable over the network, so instances exposed to untrusted SIP traffic are the relevant concern.
What can be done if updating is not immediately possible?
Restrict access to the SIPp service so that untrusted sources cannot send SIP messages to it. Filtering or rejecting SIP messages with oversized header content can also reduce exposure.