7 matches found
CVE-2026-64531
CVE-2026-64531 describes a Linux kernel issue in net/openvswitch: generated flow actions stored as nlattrs can exceed the 16-bit nla_len, allowing an oversized container to be closed with a truncated length. The fix preserves large total-action streams but rejects nested action containers that do...
EUVD-2026-49109
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nlalen field is u16. Commit a1e64addf3ff "net: openvswitch: remove misbehaving actions length check" allowed the...
UBUNTU-CVE-2024-41044
In the Linux kernel, the following vulnerability has been resolved: ppp: reject claimed-as-LCP but actually malformed packets Since 'pppasyncencode' assumes valid LCP packets with code from 1 to 7 inclusive, add 'pppcheckpacket' to ensure that LCP packet has an actual body beyond PPPLCP header...
SUSE CVE-2024-35434
Irontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtpcheckpacket at /sngrep/src/rtp.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted SIP packet...
Irontec Sngrep 安全漏洞
Irontec Sngrep is a tool from Irontec for displaying SIP call message streams from endpoints. A security vulnerability exists in Irontec Sngrep version v1.8.1, which originates from a heap buffer overflow in the rtpcheckpacket function on /sngrep/src/rtp.c, which allows an attacker to trigger a...
UBUNTU-CVE-2023-36192
Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capturewscheckpacket at /src/capture.c...
PT-2023-25474
Name of the Vulnerable Software and Affected Versions Sngrep version 1.6.0 Description A heap buffer overflow was discovered in Sngrep via the function capture ws check packet at /src/capture.c. Recommendations For Sngrep version 1.6.0, at the moment, there is no information about a newer version...