{"id":"CVE-2026-121944","published":"2026-11-04T13:17:29.123","lastModified":"2026-11-04T19:17:34.800","description":"sngrep through 1.9.0 contains an infinite loop vulnerability in capture_packet_reasm_ip() in src/capture.c that allows attackers to cause denial of service via crafted NFLOG TLVs. Attackers can supply a pcap file with link type NFLOG containing a non-payload TLV with length under 4, making the capture thread spin at full CPU and stop processing packets.","cvssScore":5.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwes":["CWE-835"],"vendors":[],"products":[],"references":[{"url":"https://github.com/irontec/sngrep/blob/v1.9.0/src/capture.c#L581-L598","tags":[]},{"url":"https://github.com/irontec/sngrep/issues/589","tags":[]},{"url":"https://hackmd.io/@haindpwn/sngrep-sip-payload-missing-nul-oob-read","tags":[]},{"url":"https://www.vulncheck.com/advisories/sngrep-through-1.9.0-infinite-loop-dos-via-crafted-nflog-tlv","tags":[]},{"url":"https://hackmd.io/@haindpwn/cve-2026-121943-121944-sngrep-sip-payload-missing-nul-oob-read","tags":[]}],"exploitRefs":[{"url":"https://github.com/irontec/sngrep/blob/v1.9.0/src/capture.c#L581-L598","tags":[]},{"url":"https://github.com/irontec/sngrep/issues/589","tags":[]}],"hasPoc":true,"ai":null}