SIPp vulnerabilities
We track 3 vulnerabilities in SIPp products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2026.
Latest SIPp vulnerabilities
- 7.5 High severity
sipp: Buffer Copy without Checking Size of Input
SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated remote attackers can send crafted SIP messages with oversize
- 7.5 High severity
sipp: Stack-based Buffer Overflow
SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and c
- 7.5 High severity
sipp: Buffer Copy without Checking Size of Input
SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to ove