Vendors / irontec Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 4
Exploited now irontec records in CISA KEV No irontec vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
Irontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp_check_packet at /sngrep/src/rtp.c.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00609 · Published 2024-05-29 · No fix listed CWE-122
Priority HIGH 69
Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00308 · Published 2023-06-23 · No fix listed CWE-787
Priority HIGH 69
Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_packet_reasm_ip at /src/capture.c.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00309 · Published 2023-05-09 · No fix listed CWE-787
Priority HIGH 67
Sngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packet_set_payload at /src/packet.c.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00308 · Published 2023-05-09 · No fix listed CWE-787
Priority MEDIUM 63
sngrep through 1.9.0 contains an infinite loop vulnerability in capture_packet_reasm_ip() in src/capture.c that allows attackers to cause denial of service via crafted NFLOG TLVs.
CVSS 4.0 MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00237 · Published 2026-11-04 · No fix listed CWE-835
Priority MEDIUM 61
Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip_check_packet and sip_validate_packet caused by an off-by-one length check on 10240-byte SIP payloads.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.05551 · Published 2026-11-04 · No fix listed CWE-170
Priority MEDIUM 47
A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01838 · Published 2024-04-09 · No fix listed CWE-120
Priority MEDIUM 46
A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.018 · Published 2024-04-09 · No fix listed CWE-120
Priority MEDIUM 44
sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00879 · Published 2026-09-12 · No fix listed CWE-121
Priority MEDIUM 43
A vulnerability was found in irontec klear-library chloe and classified as critical.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00691 · Published 2023-02-21 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
4 4 2 0 0
THREATIST.IORead the docs