CVE-2026-90558criticalCWE-121

CVE-2026-90558: falha crítica em irontec sngrep

sngrep through 1.8.4 Stack Buffer Overflow via SIP Headers

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar sngrep+ Monitorar sngrep

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.9%
sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause crashes or execute arbitrary code during packet parsing and rendering.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
irontec · sngrep
CVEs relacionadas — irontec sngrep

No mesmo produto, das mais perigosas para as menos.

CVE-2026-121943MEDIUMIrontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packetEPSS 5.6%CVE-2024-3120CRITICALStack-Buffer Overflow in 'Content-Length' and 'Warning' Header Processing in sngrepEPSS 1.8%CVE-2024-3119CRITICALStack-Buffer Overflow in 'Call-ID' and 'X-Call-ID' SIP Header Processing in sngrepEPSS 1.8%CVE-2026-121944MEDIUMsngrep through 1.9.0 Infinite Loop DoS via Crafted NFLOG TLVEPSS 0.2%