SIPp Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in SIPp version 3.3. This vulnerability allows local, unauthenticated attackers to execute arbitrary code by providing malicious input through the configuration file. The issue arises because user-supplied input is not properly validated, enabling attackers to craft configuration files with oversized values that overflow a stack buffer. This overflow can overwrite the return address, allowing the execution of arbitrary code using return-oriented programming techniques.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, allowing for arbitrary code execution on the affected system.

Reproduction

The vulnerability can be reproduced by creating a configuration file that includes oversized values designed to overflow a stack buffer. Once this file is loaded by SIPp, the buffer overflow occurs, overwriting the return address and executing the crafted payload.