NIXPKGS-2026-2594

GitHub issue published 7 hours ago

PackageKit: dnf5 backend ignores SIMULATE on RepoRemove

Permalink CVE-2026-19816

7.1 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

updated 7 hours ago by @erictapen Activity log

• Created suggestion 14 hours ago
• @LeSuisse ignored
  19 packages

  • gnome-packagekit
  • fedora-backgrounds.f32
  • fedora-backgrounds.f33
  • fedora-backgrounds.f34
  • fedora-backgrounds.f35
  • fedora-backgrounds.f36
  • fedora-backgrounds.f37
  • fedora-backgrounds.f38
  • kdePackages.packagekit-qt
  • qt6Packages.packagekit-qt
  • haskellPackages.fedora-krb
  • haskellPackages.fedora-dists
  • haskellPackages.fedora-releases
  • python313Packages.python-fedora
  • python314Packages.python-fedora
  • python313Packages.fedora-messaging
  • python314Packages.fedora-messaging
  • haskellPackages.fedora-haskell-tools
  • gnomeExtensions.fedora-linux-update-indicator
  10 hours ago
• @erictapen accepted 7 hours ago
• @erictapen published on GitHub 7 hours ago

PackageKit: dnf5 backend ignores SIMULATE on RepoRemove

• https://github.com/PackageKit/PackageKit/commit/33be77b3ecd3b566ca117358dc18c58… patch
• https://github.com/PackageKit/PackageKit/security/advisories/GHSA-g5gf-h68q-gxc8 vendor-advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2515940 issue-tracking

---

PackageKit

• <1.4.0

compat-PackageKit08

NIXPKGS-2026-2593

GitHub issue published 10 hours ago

davenardella snap7 s7_micro_client.cpp opUpload memory corruption

Permalink CVE-2026-90572

2.0 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): High (H)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): High (H)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 10 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 14 hours ago
• @LeSuisse ignored
  2 packages

  • python313Packages.python-snap7
  • python314Packages.python-snap7
  1 day, 7 hours ago
• @LeSuisse accepted 1 day, 7 hours ago
• @LeSuisse published on GitHub 10 hours ago

davenardella snap7 s7_micro_client.cpp opUpload memory corruption

• VDB-403157 | davenardella snap7 s7_micro_client.cpp opUpload memory corruption mitigationtechnical-descriptionvdb-entry
• VDB-403157 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• CVE-2026-90572 | CVE Analysis and Report third-party-advisory
• Submit #912711 | davenardella snap7 1.4.3 Memory Corruption third-party-advisory
• https://github.com/davenardella/snap7/issues/30 issue-trackingexploit
• https://github.com/davenardella/snap7/ product

---

snap7

• ==1.4.1
• ==1.4.3
• ==1.4.0
• ==1.4.2

NIXPKGS-2026-2592

GitHub issue published 10 hours ago

An issue was discovered in HAProxy 3.3.0 through 3.4.4 and …

Permalink CVE-2026-90678

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Changed (C)
• Confidentiality (C): None (N)
• Integrity (I): High (H)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Changed (C)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): Low (L)

updated 10 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 14 hours ago
• @LeSuisse ignored
  2 packages

  • prometheus-haproxy-exporter
  • haskellPackages.io-streams-haproxy
  1 day, 7 hours ago
• @LeSuisse accepted 1 day, 7 hours ago
• @LeSuisse published on GitHub 10 hours ago

An issue was discovered in HAProxy 3.3.0 through 3.4.4 and …

• BUG/MAJOR: h3: reject H3 truncated frames patch
• http://git.haproxy.org/?p=haproxy.git;a=commit;h=86a4ebc761a278838e8cb06f3a2922… patch
• HAProxy 3.5-dev6 ChangeLog release-notes

---

HAProxy

• =<3.4.4
• =<3.3.14
• ==3.5-dev6
• =<3.5-dev5

NIXPKGS-2026-2591

GitHub issue published 10 hours ago

SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parameter

Permalink CVE-2026-90779

8.7 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 10 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 14 hours ago
• @LeSuisse ignored reference Patch Com… 1 day, 7 hours ago
• @LeSuisse accepted 1 day, 7 hours ago
• @LeSuisse published on GitHub 10 hours ago

SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parameter

• Pull Request #880 issue-trackingpatch
• Unbounded strncpy into algo[32] in createAuthHeader() at v3.7.7 technical-description
• https://github.com/SIPp/sipp product
• VulnCheck Advisory: SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parameter third-party-advisory

Ignored references (1)

• Patch Commit patch

---

sipp

• =<3.7.7

Patch: https://github.com/SIPp/sipp/commit/09916a92de768ab08056a78e4731f9edc3853e1c

NIXPKGS-2026-2590

GitHub issue published 10 hours ago

MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound

Permalink CVE-2026-90783

8.5 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 10 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 14 hours ago
• @LeSuisse ignored package mkvtoolnix-cli 1 day, 7 hours ago
• @LeSuisse accepted 1 day, 7 hours ago
• @LeSuisse published on GitHub 10 hours ago

MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound

• Patch Commit patch
• Unchecked video superindex allocation in avi_parse_input_file() at release-101.0 technical-description
• https://codeberg.org/mbunkus/mkvtoolnix product
• VulnCheck Advisory: MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound third-party-advisory

---

MKVToolNix

• ==1495126138e086080f0163bee27fafbdf956a1d0
• =<101.0

NIXPKGS-2026-2589

GitHub issue published 10 hours ago

SIPp through 3.7.7 Buffer Overflow via Oversized SIP Header Content

Permalink CVE-2026-90780

8.7 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 10 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 14 hours ago
• @LeSuisse accepted 1 day, 7 hours ago
• @LeSuisse published on GitHub 10 hours ago

SIPp through 3.7.7 Buffer Overflow via Oversized SIP Header Content

• Pull Request #881 issue-trackingpatch
• Patch Commit patch
• Unbounded sprintf concatenation in get_header() at v3.7.7 technical-description
• https://github.com/SIPp/sipp product
• VulnCheck Advisory: SIPp through 3.7.7 Buffer Overflow via Oversized SIP Header Content third-party-advisory

---

sipp

• =<3.7.7

NIXPKGS-2026-2588

GitHub issue published 10 hours ago

alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()

Permalink CVE-2026-90781

4.8 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 10 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 14 hours ago
• @LeSuisse accepted 1 day, 7 hours ago
• @LeSuisse published on GitHub 10 hours ago

alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()

• Patch Commit patch
• Vulnerable name= parsing loops in __snd_ctl_ascii_elem_id_parse() at v1.2.16.1 technical-description
• alsa-devel report thread mailing-list
• https://github.com/alsa-project/alsa-lib product
• VulnCheck Advisory: alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse() third-party-advisory

---

alsa-lib

• =<1.2.16.1
• ==f84cd4ced7b36fddb8e4ee24404cf7c091d27020

Needs a backport to stable.

NIXPKGS-2026-2587

GitHub issue published 10 hours ago

procs through 0.14.12 Terminal Escape Sequence Injection via Command

Permalink CVE-2026-90773

2.4 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): Low (L)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Low (L)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 10 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 14 hours ago
• @LeSuisse ignored package mprocs 1 day, 7 hours ago
• @LeSuisse accepted 1 day, 7 hours ago
• @LeSuisse published on GitHub 10 hours ago

procs through 0.14.12 Terminal Escape Sequence Injection via Command

• GitHub Issue #950 issue-tracking
• https://github.com/dalance/procs product
• https://github.com/dalance/procs/blob/v0.14.12/src/columns/command.rs technical-description
• https://github.com/dalance/procs/commit/a064cec7d59f69a636d38e247824245dcd3a9836 patch
• VulnCheck Advisory: procs through 0.14.12 Terminal Escape Sequence Injection via Command third-party-advisory

---

procs

• =<0.14.12

NIXPKGS-2026-2586

GitHub issue published 10 hours ago

rustypaste before 0.18.1 Path Traversal via filename header

Permalink CVE-2026-90774

8.7 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 10 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 14 hours ago
• @LeSuisse ignored package rustypaste-cli 1 day, 7 hours ago
• @LeSuisse ignored reference https://g… 1 day, 7 hours ago
• @LeSuisse accepted 1 day, 7 hours ago
• @LeSuisse published on GitHub 10 hours ago

rustypaste before 0.18.1 Path Traversal via filename header

• GitHub Issue #622 issue-tracking
• https://github.com/orhun/rustypaste/blob/v0.18.0/src/paste.rs technical-description
• https://github.com/orhun/rustypaste/commit/ac05d552596af4a8429d80f30d11f67117ce… patch
• VulnCheck Advisory: rustypaste before 0.18.1 Path Traversal via filename header third-party-advisory

Ignored references (1)

• https://github.com/orhun/rustypaste product

---

rustypaste

• <0.18.1

NIXPKGS-2026-2585

GitHub issue published 10 hours ago

SIPp through 3.7.7 Buffer Overflow via SIP To Header Tag

Permalink CVE-2026-90778

8.7 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 10 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 14 hours ago
• @LeSuisse accepted 1 day, 7 hours ago
• @LeSuisse published on GitHub 10 hours ago

SIPp through 3.7.7 Buffer Overflow via SIP To Header Tag

• Pull Request #879 issue-trackingpatch
• Patch Commit patch
• Unbounded copy in get_peer_tag() at v3.7.7 technical-description
• https://github.com/SIPp/sipp product
• VulnCheck Advisory: SIPp through 3.7.7 Buffer Overflow via SIP To Header Tag third-party-advisory

---

sipp

• =<3.7.7