irontec

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

irontec records in CISA KEV

No irontec vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records in Sngrep · all components

TI-2024-23438 CVE-2024-35434

HIGH 72

Irontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp_check_packet at /sngrep/src/rtp.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00609 Published 2024-05-29 No fix listed CWE-122

TI-2023-18152 CVE-2023-36192 · GHSA-phf3-4hpx-8j74

HIGH 69

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00308 Published 2023-06-23 No fix listed CWE-787

TI-2023-15298 CVE-2023-31982 · GHSA-xf28-8cq4-qppx

HIGH 69

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_packet_reasm_ip at /src/capture.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00309 Published 2023-05-09 No fix listed CWE-787

TI-2023-15297 CVE-2023-31981 · GHSA-27pq-ccjc-wxmc

HIGH 67

Sngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packet_set_payload at /src/packet.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00308 Published 2023-05-09 No fix listed CWE-787

TI-2024-02922 CVE-2024-3120 · GHSA-4p8q-p8qc-486x

MEDIUM 47

A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01838 Published 2024-04-09 No fix listed CWE-120

TI-2024-02921 CVE-2024-3119 · GHSA-38jr-26cr-gjff

MEDIUM 46

A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.018 Published 2024-04-09 No fix listed CWE-120