CVE-2024-3120

CVE-2024-3120 affects all versions of sngrep since v1.4.1. A stack-buffer overflow arises from inadequate bounds checking when copying the SIP headers ‘Content-Length’ and ‘Warning’ into fixed-size buffers in src/sip.c (sip_validate_packet and sip_parse_extra_headers). This allows remote attacker...

CVE-2024-35434

CVE-2024-35434 affects Irontec Sngrep v1.8.1. A heap buffer overflow in the function rtp_check_packet (file /sngrep/src/rtp.c) can be triggered by a crafted SIP packet, enabling a Denial of Service (DoS) . The CVE is documented with a network-based attack vector and low attack complexity (no priv...

CVE-2024-3119

CVE-2024-3119 affects sngrep; all versions since v0.4.2 vulnerable due to improper handling of SIP headers. The functions sip_get_callid and sip_get_xcallid copy header data into fixed-size buffers with strncpy without validating length, enabling remote attackers to trigger arbitrary code executi...

CVE-2023-31982

CVE-2023-31982 concerns a heap buffer overflow in Sngrep v1.6.0, triggered by the function capture_packet_reasm_ip in /src/capture.c. Multiple sources (NVD/NVD-derived records) indicate the vulnerability has a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, no p...

CVE-2023-31981

Sngrep v1.6.0 contains a stack buffer overflow in packet_set_payload (src/packet.c). The issue is a locally exploitable vulnerability with high impact to confidentiality, integrity, and availability (CVSS v3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; base score 7.8). Details across sources confirm t...

CVE-2023-36192

CVE-2023-36192 affects Sngrep v1.6.0, containing a heap buffer overflow in the function capture_ws_check_packet (source: /src/capture.c). The issue is documented across multiple feeds (NVD, Red Hat, SUSE, OSV, etc.), with the associated CVSSv3 base score of 7.8 (HIGH) and a LOCAL attack vector, r...