SIPp 3.7.7 Vulnerabilities: Stack Buffer Overflow Risks Identified

• •SIPp 3.7.7 has two critical stack buffer overflow vulnerabilities.
• •Affected systems include all installations of SIPp 3.7.7.
• •No active exploitation has been reported, but immediate attention is advised.

Two vulnerabilities have been identified in SIPp version 3.7.7, specifically a stack buffer overflow via the createAuthHeader algorithm parameter and another via the SIP 'To' header tag. These vulnerabilities are classified under CWE-121 for stack-based buffer overflow. Affected systems include all installations of SIPp 3.7.7. The vulnerabilities could potentially allow attackers to execute arbitrary code or crash the application. No active exploitation has been reported at this time, but the vulnerabilities are significant enough to warrant immediate attention from security professionals. Users are advised to prioritize these vulnerabilities based on their threat landscape. Current status indicates no patches have been released yet. The vulnerabilities have not been assigned CVEs at this moment.