Threats tagged 'ghsa-5wr4-785p-23qx'

sngrep versions through 1.9.0 have an infinite loop vulnerability in the capture_packet_reasm_ip() function located in src/capture.c. This flaw can be triggered by attackers supplying a specially crafted pcap file with NFLOG link type containing a non-payload TLV with a length under 4. Exploitation causes the capture thread to enter a spin loop at full CPU usage, resulting in denial of service.