[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-90558":6},{"stargazers_count":4,"fetched_at":5},7,"2026-09-14T00:59:52.343Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":23,"downstream":24,"duplicates":25,"related":26,"reserved_at":9,"published_at":27,"modified_at":27,"state":28,"summary":29,"references_raw":36,"kevs":68,"epss":9,"epss_history":69,"metrics":70,"affected":84},"CVE-2026-90558","sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause crashes or execute arbitrary code during packet parsing and rendering.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","weakness","Draft","Variant","High",[],[],[22],"DEBIAN-CVE-2026-90558",[],[],[],[],"2026-09-12T18:06:42.389Z","Received",{"cisa_kev":30,"cisa_ransomware":30,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":31,"severity_score":32,"severity_version":33,"severity_source":34,"severity_vector":35,"severity_status":28},false,"critical",9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[37,43,48,53,57,62],{"url":38,"sources":39,"tags":41},"https://github.com/irontec/sngrep/commit/1ff74ee3ab5ff280e8ba976aa8c744dca57eb35b",[34,40],"nvd",[42],"Patch",{"url":44,"sources":45,"tags":46},"https://github.com/irontec/sngrep",[34,40],[47],"Product",{"url":49,"sources":50,"tags":51},"https://github.com/irontec/sngrep/blob/v1.8.4/src/sip_call.c#L260",[34,40],[52],"Technical Description",{"url":54,"sources":55,"tags":56},"https://github.com/irontec/sngrep/blob/v1.8.4/src/sip_msg.c#L150",[34,40],[52],{"url":58,"sources":59,"tags":60},"https://www.vulncheck.com/advisories/sngrep-through-1.8.4-stack-buffer-overflow-via-sip-headers",[34,40],[61],"Third Party Advisory",{"url":63,"sources":64,"tags":66},"https://security-tracker.debian.org/tracker/CVE-2026-90558",[65],"osv_debian",[67],"Advisory",[],[],[71,78,82],{"source":34,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":72,"cvss_v4_0":75},{"baseScore":32,"baseSeverity":73,"vectorString":35,"impactScore":32,"exploitabilityScore":74},"CRITICAL",10,{"baseScore":76,"baseSeverity":73,"vectorString":77,"impactScore":9,"exploitabilityScore":9},9.3,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",{"source":40,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":79,"cvss_v4_0":80},{"baseScore":32,"baseSeverity":73,"vectorString":35,"impactScore":32,"exploitabilityScore":74},{"baseScore":76,"baseSeverity":73,"vectorString":81,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":65,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":83,"cvss_v4_0":9},{"baseScore":32,"baseSeverity":9,"vectorString":35,"impactScore":32,"exploitabilityScore":74},[85,97],{"ecosystem":86,"name":87,"vendor":88,"product":87,"cpe_part":9,"purl_type":89,"purl_namespace":88,"purl_name":87,"source":9,"versions":90},"Debian","sngrep","debian","deb",[91,95,96],{"version":92,"is_range":93,"range_type":94,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"ecosystem",{"version":92,"is_range":93,"range_type":94,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":92,"is_range":93,"range_type":94,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":87,"vendor":98,"product":87,"cpe_part":99,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":100},"irontec","a",[101],{"version":102,"is_range":93,"range_type":34,"version_start":9,"version_start_type":9,"version_end":103,"version_end_type":104,"fixed_in":9},"\u003C= 1.8.4","1.8.4","including"]