Description
Irontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp_check_packet at /sngrep/src/rtp.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SIP packet.
Published: 2024-05-29
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-35337 Irontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp_check_packet at /sngrep/src/rtp.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SIP packet.
History

Sun, 13 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.0021}

 epss

{'score': 0.00132}

Thu, 13 Feb 2025 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Irontec
Irontec sngrep
CPEs cpe:2.3:a:irontec:sngrep:1.8.1:*:*:*:*:*:*:*
Vendors & Products Irontec
Irontec sngrep
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 22 Aug 2024 21:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-122
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Irontec Sngrep
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-02-13T15:58:48.588Z

Reserved: 2024-05-17T00:00:00.000Z

Link: CVE-2024-35434

cve-icon Vulnrichment

Updated: 2024-08-02T03:14:52.734Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-29T19:15:48.200

Modified: 2025-09-27T00:06:40.113

Link: CVE-2024-35434

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses