CVE Catalog

CVE-2023-36192

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.28%

20th percentile - higher than 20% of all known CVEs

Summary

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c.

Risk Assessment

Heap buffer overflow can lead to arbitrary code execution, posing a serious security risk to the system.

Recommendation

It is recommended to update to the latest version of Sngrep to mitigate this vulnerability.

Other vulnerabilities in Sngrep v1.6.0

Original NVD description (English source)

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS