Every CVE Search/ Get API key

CVE-2024-3120

Stack-Buffer Overflow in 'Content-Length' and 'Warning' Header Processing in sngrep

9.0 CriticalFix available

A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers in the sip_validate_packet and sip_parse_extra_headers functions within src/sip.c. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via crafted SIP messages.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.84%Up 1.8 points since Apr 10, 2024
90%50%10%1%

What each source reports

CVE List Score used 9.0

Stack-Buffer Overflow in 'Content-Length' and 'Warning' Header Processing in sngrep

A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers in the sip_validate_packet and sip_parse_extra_headers functions within src/sip.c. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via crafted SIP messages.

Record
CVE-2024-3120
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-120
Updated
2026-11-02
EUVDEUVD-2024-31722 9.0

A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers in the sip_validate_packet and sip_parse_extra_headers functions within src/sip.c. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via crafted SIP messages.

Record
EUVD-2024-31722
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-4p8q-p8qc-486x 9.0

A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is...

A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers in the sip_validate_packet and sip_parse_extra_headers functions within src/sip.c. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via crafted SIP messages.

Record
GHSA-4p8q-p8qc-486x
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-120, CWE-787
Updated
2026-11-02
NVD 9.0

A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers in the sip_validate_packet and sip_parse_extra_headers functions within src/sip.c. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via crafted SIP messages.

Record
CVE-2024-3120
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-120, CWE-787
Updated
2026-11-02
OSV 9.0

Stack-Buffer Overflow in 'Content-Length' and 'Warning' Header Processing in sngrep

A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers in the sip_validate_packet and sip_parse_extra_headers functions within src/sip.c. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via crafted SIP messages.

Record
CVE-2024-3120
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-120
Updated
2026-11-02
OSVDEBIAN-CVE-2024-3120 9.8

A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers in the sip_validate_packet and sip_parse_extra_headers functions within src/sip.c. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via crafted SIP messages.

Record
DEBIAN-CVE-2024-3120
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-3120 9.0

A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers in the sip_validate_packet and sip_parse_extra_headers functions within src/sip.c. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via crafted SIP messages.

Record
UBUNTU-CVE-2024-3120
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2024:0106-1 No score

Security update for sngrep

This update for sngrep fixes the following issues:

  • Update to version 1.8.1

    • Fix CVE-2024-3119: sngrep: buffer overflow due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers.
    • Fix CVE-2024-3120: sngrep: stack-buffer overflow due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers.

  • Update to versino 1.8.0

    • fix typo in message, thanks to lintian.
    • fix compiler warnings about unused variables.
    • Fixed a typo in comment line in filter.c
    • Redefine usage of POSIX signals.
    • Support for building sngrep using CMake added.

  • Update to version 1.7.0

    • save: add option --text to save captured data to plain text
    • capture: fix memory overflows while parsing IP headers
    • hep: fix hep listener enabled in offline mode
    • core: stop sngrep when parent process has ended
    • ssl: fix decrypt with AES256 GCM SHA384 cipher
Record
openSUSE-SU-2024:0106-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13856-1 No score

sngrep-1.8.1-1.1 on GA media

These are all security issues fixed in the sngrep-1.8.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13856-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sngrep
Debian:12
 All versions, plus listed versions
1.6.0-11.7.0-11.7.0-21.7.0-2~bpo12+11.8.0-1
Show 9 moreShow less
1.8.1-11.8.2-11.8.2-1~bpo12+11.8.3-11.8.3-1~bpo13+11.8.4-11.8.4-1~bpo13+11.8.4-21.9.0-1
 None known
sngrep
Debian:13
 before 1.8.1-1
1.8.1-1
sngrep
Debian:14
 before 1.8.1-1
1.8.1-1
sngrep
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.4.1-11.0.0-11.1.0-11.2.0-11.2.0-1build1
 None known
sngrep
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.4.3-11.4.4-11.4.4-21.4.5-1
 None known
sngrep
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.4.6-11.4.6-2
 None known
sngrep
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.4.9-11.4.10-11.4.10-1ubuntu0.1
 None known
sngrep
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.7.0-21.8.0-11.8.0-1build11.8.0-1build2
 None known
sngrep
Ubuntu:25.10
 All versions, plus listed versions
1.8.2-1
 None known
sngrep
Ubuntu:26.10
 All versions, plus listed versions
1.8.3-11.8.4-1
 None known
Show 4 moreShow less
Affected packages
PackageAffectedFixed
sngrep
Ubuntu:26.04:LTS
 All versions, plus listed versions
1.8.2-11.8.3-1
 None known
sngrep
SUSE:Package Hub 15 SP5
 before 1.8.1-bp155.2.3.1
1.8.1-bp155.2.3.1
sngrep
openSUSE:Leap 15.5
 before 1.8.1-bp155.2.3.1
1.8.1-bp155.2.3.1
sngrep
openSUSE:Tumbleweed
 before 1.8.1-1.1
1.8.1-1.1

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-3120 is a critical vulnerability (CVSS 9.0) in Irontec Sngrep, published April 9, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.84%, the 79th percentile. Fixed in sngrep 1.8.1-1.

References

Show 6 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open