Bug 2566873 (CVE-2026-121944)
| Summary: | CVE-2026-121944 sngrep: sngrep: Denial of Service via crafted packet capture file | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in sngrep. This vulnerability allows an attacker to cause a Denial of Service (DoS) by convincing a user to open a specially crafted packet capture (PCAP) file. Due to improper validation in the packet reassembly routine, processing malformed Netfilter logging (NFLOG) data triggers an infinite loop, consuming excessive processor resources and halting packet processing.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2567288 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-11-04 13:04:25 UTC
|