Description
SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SIPp | sipp | ≤ 3.7.7 | — |
References
- Pull Request #880 patch issue-tracking
- Patch Commit patch
- Unbounded strncpy into algo[32] in createAuthHeader() at v3.7.7 technical-description
- https://github.com/SIPp/sipp product
- VulnCheck Advisory: SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parameter third-party-advisory