一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月13日

CVE-2026-90558 [CRITICAL] – sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute forma

未分类
📑 文章目录

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause crashes or execute arbitrary code during packet parsing and rendering.