PT-2026-43095 · Sipp · Sipp

Published 2026-05-23 · Updated 2026-05-23 · CVE-2018-25356

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SIPp versions 3.6 and earlier

Description A local buffer overflow exists in the handling of command-line arguments. Local attackers can cause the application to crash or execute arbitrary code by providing oversized input to the -3pcc, -i, or -log file parameters. This occurs because the strcpy() function in sipp.cpp writes data beyond the allocated buffer boundaries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2018-25356

Affected Products

Sipp

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2018-25356 · Security Note
• https://github.com/SIPp/sipp/releases · Note
• https://vulncheck.com/advisories/sipp-local-buffer-overflow-via-command-line-arguments · Note
• http://sipp.sourceforge.net · Note
• https://exploit-db.com/exploits/44962 · Note
• https://t.me/CVEtracker/54733 · Telegram Post