sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause crashes or execute arbitrary code during packet parsing and rendering.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e5174fc4cf advisory.

    Fixed CVE-2026-90558

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3ff086aa2a advisory.

    Fixed CVE-2026-90558

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-019108693f advisory.

    Fixed CVE-2026-90558

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines     when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with     oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause crashes or     execute arbitrary code during packet parsing and rendering. (CVE-2026-90558)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
351282	Fedora 43 : sngrep (2026-e5174fc4cf)	Nessus	Fedora Local Security Checks	Local	critical
351275	Fedora 44 : sngrep (2026-3ff086aa2a)	Nessus	Fedora Local Security Checks	Local	critical
351274	Fedora 45 : sngrep (2026-019108693f)	Nessus	Fedora Local Security Checks	Local	critical
345447	Linux Distros Unpatched Vulnerability : CVE-2026-90558	Nessus	Misc.	Local	critical

Detections

Analytics

CVE-2026-90558

critical

Tenable Plugins

critical

critical

critical

critical