PatchTheCVEsngrep vulnerabilities and fixes
Recent CVEs affecting sngrep, with upgrade or downgrade steps. 4 tracked.
sngrep has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-05-29. Highest priority: CVE-2024-3120 (score 56/100).
- CVE-2024-3120 CRITICAL 9.0 UPGRADE A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1
- CVE-2024-3119 CRITICAL 9.0 UPGRADE A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Ca
- CVE-2024-35434 HIGH 7.5 DOWNGRADE Irontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp_check_packet at /s
- CVE-2023-36192 HIGH 7.8 DOWNGRADE Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /sr
FAQ
How do I fix sngrep vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sngrep being exploited right now?
None of the tracked sngrep CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sngrep CVE should I patch first?
CVE-2024-3120 currently ranks highest (56/100): A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1.