CyberRota Analysis
AI-GeneratedSIPp versions up to 3.7.7 are vulnerable to a buffer overflow in the get_header() function, which can be exploited by unauthenticated remote attackers sending specially crafted SIP messages with headers exceeding 20,490 bytes. This vulnerability can lead to process crashes, potentially disrupting services that rely on SIPp for handling SIP communications. Organizations using SIPp should prioritize patching or mitigating this vulnerability to prevent service interruptions and potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated remote attackers can send crafted SIP messages with oversized headers to overflow the static buffer and crash the process.