PT-2024-26504 · Irontec+1 · Sngrep+1

Published 2024-05-29 · Updated 2024-08-22 · CVE-2024-35434

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Irontec Sngrep version 1.8.1

Description The issue is a heap buffer overflow that can be triggered via the rtp check packet function, located at /sngrep/src/rtp.c. This allows attackers to cause a Denial of Service (DoS) by sending a crafted SIP packet.

Recommendations For Irontec Sngrep version 1.8.1, consider disabling the rtp check packet function as a temporary workaround until a patch is available. Restrict access to the /sngrep/src/rtp.c module to minimize the risk of exploitation. Avoid processing crafted SIP packets in the affected API endpoint until the issue is resolved.

Exploit

Fix

DoS

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2024-35434

OPENSUSE-SU-2024:14057-1

Affected Products

Debian

Sngrep

References · 13

• 🔥 https://github.com/inputzero/Security-Advisories/blob/main/CVE-XXXX-XXXX.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-35434 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-35434 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35434 · Security Note
• https://ubuntu.com/security/CVE-2024-35434 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-35434 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-35434 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14057-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-35434 · Security Note
• https://github.com/irontec/sngrep/issues/481 · Note
• https://t.me/cvenotify/81463 · Telegram Post
• https://suse.com/security/cve/CVE-2024-35434 · Note
• https://t.me/cvenotify/81448 · Telegram Post