https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:05:00.881518+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-157943 EUVD-2026-157943 2026-10-02T10:05:00.964786+00:00 EUVD-2026-157943 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3119 fkie_cve-2024-3119 2026-10-02T10:05:00.964820+00:00

A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions sip_get_callid and sip_get_xcallid in sip.c use the strncpy function to copy header contents into fixed-size buffers without checking the data length. This flaw allows remote attackers to execute arbitrary code or cause a denial of service (DoS) through specially crafted SIP messages.

 https://cve.radiocsirt.org/vuln/ghsa-38jr-26cr-gjff GHSA-38jr-26cr-gjff 2026-10-02T10:05:00.964851+00:00

A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions sip_get_callid and sip_get_xcallid in sip.c use the strncpy function to copy header contents into fixed-size buffers without checking the data length. This flaw allows remote attackers to execute arbitrary code or cause a denial of service (DoS) through specially crafted SIP messages.

 https://cve.radiocsirt.org/vuln/gsd-2024-3119 gsd-2024-3119 2026-10-02T10:05:00.964870+00:00 gsd-2024-3119 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0106-1 openSUSE-SU-2024:0106-1 — Security update for sngrep 2026-10-02T10:05:00.964881+00:00

Security update for sngrep

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3119 UBUNTU-CVE-2024-3119 2026-10-02T10:05:00.964899+00:00

Affected: Ubuntu:16.04:LTS: sngrep, Ubuntu:18.04:LTS: sngrep, Ubuntu:20.04:LTS: sngrep, Ubuntu:22.04:LTS: sngrep, Ubuntu:24.04:LTS: sngrep, Ubuntu:25.10: sngrep, Ubuntu:26.04:LTS: sngrep

A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions sip_get_callid and sip_get_xcallid in sip.c use the strncpy function to copy header contents into fixed-size buffers without checking the data length. This flaw allows remote attackers to execute arbitrary code or cause a denial of service (DoS) through specially crafted SIP messages.