Bug 1225638 (CVE-2024-35434) - VUL-0: CVE-2024-35434: sngrep: Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp_check_packet at /sngrep/src/rtp.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SIP packet.
Summary: VUL-0: CVE-2024-35434: sngrep: Sngrep v1.8.1 was discovered to contain a heap...
Status: IN_PROGRESS
Alias: CVE-2024-35434
Product: openSUSE Distribution
Classification: openSUSE
Component: Security (show other bugs)
Version: Leap 15.6
Hardware: Other Other
: P3 - Medium : Normal (vote)
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/408095/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-05-30 03:51 UTC by SMASH SMASH
Modified: 2024-06-18 19:51 UTC (History)
3 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description SMASH SMASH 2024-05-30 03:51:10 UTC 
Irontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp_check_packet at /sngrep/src/rtp.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SIP packet.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35434
https://www.cve.org/CVERecord?id=CVE-2024-35434
https://github.com/inputzero/Security-Advisories/blob/main/CVE-XXXX-XXXX.md
Comment 1 OBSbugzilla Bot 2024-05-30 20:45:03 UTC 
This is an autogenerated message for OBS integration:
This bug (1225638) was mentioned in
https://build.opensuse.org/request/show/1177801 Backports:SLE-15-SP5 / sngrep
Comment 2 OBSbugzilla Bot 2024-06-13 10:25:05 UTC 
This is an autogenerated message for OBS integration:
This bug (1225638) was mentioned in
https://build.opensuse.org/request/show/1180356 Backports:SLE-15-SP6 / sngrep
Comment 3 Andreas Stieger 2024-06-13 12:05:56 UTC 
two weeks: https://build.opensuse.org/request/show/1177800
Comment 4 Andreas Stieger 2024-06-18 19:51:40 UTC 
back to security team