CVE-2024-3120: Stack-Buffer Overflow in 'Content-Length' and 'Warning' Header Processing in sngrep
A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers in the sipvalidatepacket and sipparseextraheaders functions within src/sip.c. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via crafted SIP messages.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3120?
CVE-2024-3120 is classified as a high-severity vulnerability due to the potential for remote code execution caused by a stack-buffer overflow.
How do I fix CVE-2024-3120?
To fix CVE-2024-3120, update sngrep to version 1.8.1 or later, which includes the necessary security patches.
What are the affected versions of sngrep for CVE-2024-3120?
All versions of sngrep from 1.4.1 to 1.8.0 are affected by CVE-2024-3120.
What functions are vulnerable in CVE-2024-3120?
The vulnerable functions in CVE-2024-3120 are sip_validate_packet and sip_parse_extra_headers due to insufficient bounds checking.
Can CVE-2024-3120 be exploited remotely?
Yes, CVE-2024-3120 can be exploited remotely if an attacker sends specially crafted packets that trigger the stack-buffer overflow.