CVE-2023-36192

Опубликовано: 23 июн. 2023

Источник: debian

EPSS Низкий

Описание

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c.

Пакет	Статус	Версия исправления	Релиз	Тип
sngrep	fixed	1.7.0-2		package

Crash in CLI tool, no security impact
https://github.com/irontec/sngrep/issues/438
https://github.com/irontec/sngrep/commit/ad1daf15c8387bfbb48097c25197bf330d2d98fc

EPSS

Процентиль: 24%

0.00308

Низкий

CVE-2023-36192

CVSS3: 7.8

ubuntu

больше 3 лет назад

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c.

CVE-2023-36192

CVSS3: 7.8

nvd

больше 3 лет назад

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c.

GHSA-phf3-4hpx-8j74

CVSS3: 7.8

github

больше 3 лет назад

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c.

ALT-PU-2023-1992

CVSS3: 7.8

altlinux

больше 3 лет назад

ALT-PU-2023-1992: package `sngrep` update to version 1.7.0-alt1

EPSS

Процентиль: 24%

0.00308

Низкий