CVE-2024-3119: Stack-Buffer Overflow in 'Call-ID' and 'X-Call-ID' SIP Header Processing in sngrep
A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions sipgetcallid and sipgetxcallid in sip.c use the strncpy function to copy header contents into fixed-size buffers without checking the data length. This flaw allows remote attackers to execute arbitrary code or cause a denial of service (DoS) through specially crafted SIP messages.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3119?
CVE-2024-3119 is classified as a buffer overflow vulnerability with potentially high impact due to the improper handling of SIP headers.
How do I fix CVE-2024-3119?
To fix CVE-2024-3119, update sngrep to version 1.8.1 or later, which addresses the buffer overflow issue.
Which versions of sngrep are affected by CVE-2024-3119?
CVE-2024-3119 affects all versions of sngrep from v0.4.2 up to but not including v1.8.1.
What type of vulnerability is CVE-2024-3119?
CVE-2024-3119 is a buffer overflow vulnerability caused by improper handling of 'Call-ID' and 'X-Call-ID' SIP headers.
What are the potential consequences of exploiting CVE-2024-3119?
Exploiting CVE-2024-3119 could lead to crashes or arbitrary code execution on systems running vulnerable versions of sngrep.