SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated remote attackers can send crafted SIP messages with oversized headers to overflow the static buffer and crash the process.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b0077de9df advisory.

    Fixed a bunch of CVEs

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e377b4938d advisory.

    Fixed a bunch of CVEs

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3059115f48 advisory.

    Fixed a bunch of CVEs

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
350759	Fedora 43 : sipp (2026-b0077de9df)	Nessus	Fedora Local Security Checks	Local	high
350756	Fedora 44 : sipp (2026-e377b4938d)	Nessus	Fedora Local Security Checks	Local	high
350701	Fedora 45 : sipp (2026-3059115f48)	Nessus	Fedora Local Security Checks	Local	high

Detections

Analytics

CVE-2026-90780

high

Tenable Plugins

high

high

high