Back Linuxsecurity

Fedora 44 sngrep 1.8.4 Buffer Overflow Fix Advisory 2026

Linuxsecurity •LinuxSecurity Advisories • September 30, 2026

Share: View original

CISA confirms exploitation of a Linux firewall flaw. Check if your systems need the fix. ×

sngrep is a tool for displaying SIP calls message flows from terminal. It

supports live capture to display realtime SIP packets and can also be used as

* Mon Sep 21 2026 Peter Lemenkov - 1.8.4-4 - Fix for CVE-2026-90558

[ 1 ] Bug #2537362 - CVE-2026-90558 sngrep: sngrep through 1.8.4 Stack Buffer Overflow via SIP Headers [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3ff086aa2a' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Buffer Overflow Vulnerability in sngrep Affects Fedora Users A critical buffer overflow vulnerability, CVE-2026-90558, has been identified in sngrep versions up to 1.8.4, affecting Fedora systems. The flaw allows for potential exploitation through SIP headers, posing a significant risk to users. CISA has confirmed that this vulnerability is being actively exploited in the wild. Fedora users are advised to upgrade to version 1.8.4-4, which includes a fix for this vulnerability. The advisory was published on September 12, 2026, and the patch was made available on September 21, 2026. Users are urged to check their systems and apply the necessary updates to mitigate the risk. Failure to address this vulnerability could lead to unauthorized access and data breaches. 3 sources 73

Extracted Entities

Fedora 44 sngrep 1.8.4 Buffer Overflow Fix Advisory 2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)