CVE-2026-0710 - Sipp/sipp: sipp: denial of service and potential arbitrary code execution vulnerability

Back Back to CVE browser

HIGH

Sipp/sipp: sipp: denial of service and potential arbitrary code execution vulnerability

Published Jan 23, 2026

8.4

HIGH

CVSS 3.1

EPSS 0.24%

Description

A flaw was found in SIPp. A remote attacker could exploit this by sending specially crafted Session Initiation Protocol (SIP) messages during an active call. This vulnerability, a NULL pointer dereference, can cause the application to crash, leading to a denial of service. Under specific conditions, it may also allow an attacker to execute unauthorized code, compromising the system's integrity and availability.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (3)

https://access.redhat.com/security/cve/CVE-2026-0710
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2427788
issue-trackingx_refsource_REDHAT
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-4491
Advisory

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-0710		vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2427788		issue-trackingx_refsource_REDHAT
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-4491		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner fedora

Published Jan 23, 2026

Updated Jan 23, 2026

Reserved Jan 8, 2026

Link CVE-2026-0710

CISA Vulnrichment

Updated Jan 23, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2026-0710

Red Hat

No data

ENISA EUVD

Assigner fedora

Published Jan 23, 2026

Updated Jan 23, 2026

Link EUVD-2026-4491

GitHub

No data