Threats tagged 'ghsa-v6rr-x6vh-q7q4'

Irontec sngrep versions through 1.9.0 have an out-of-bounds stack read vulnerability in the sip_check_packet and sip_validate_packet functions. This flaw is caused by an off-by-one length check on SIP payloads of 10240 bytes. An attacker can send a crafted UDP or TCP SIP packet or provide a malicious pcap file to cause sngrep to crash or leak adjacent stack memory into displayed SIP fields.