CVE-2024-3119

Name	CVE-2024-3119
Description	A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions sip_get_callid and sip_get_xcallid in sip.c use the strncpy function to copy header contents into fixed-size buffers without checking the data length. This flaw allows remote attackers to execute arbitrary code or cause a denial of service (DoS) through specially crafted SIP messages.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	1068818

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
sngrep (PTS)	bullseye	1.4.8-1	vulnerable
	bookworm	1.6.0-1	vulnerable
	trixie	1.8.2-1	fixed
	forky, sid	1.8.3-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
sngrep	source	(unstable)	1.8.1-1			1068818

Notes

[bookworm] - sngrep <no-dsa> (Minor issue)
[bullseye] - sngrep <no-dsa> (Minor issue)
[buster] - sngrep <postponed> (Minor issue)
https://github.com/irontec/sngrep/commit/dd5fec92730562af6f96891291cd4e102b80bfcc (v1.8.1)