CVE-2026-121944

EUVD-2026-116901
sngrep through 1.9.0 contains an infinite loop vulnerability in capture_packet_reasm_ip() in src/capture.c that allows attackers to cause denial of service via crafted NFLOG TLVs. Attackers can supply a pcap file with link type NFLOG containing a non-payload TLV with length under 4, making the capture thread spin at full CPU and stop processing packets.
Infinite Loop
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulnCheckCNA
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
irontecsngrep
𝑥
≤ 1.9.0
CNA
Common Weakness Enumeration
References
https://github.com/irontec/sngrep/blob/v1.9.0/src/capture.c#L581-L598
https://github.com/irontec/sngrep/issues/589
https://hackmd.io/@haindpwn/sngrep-sip-payload-missing-nul-oob-read
https://www.vulncheck.com/advisories/sngrep-through-1.9.0-infinite-loop-dos-via-crafted-nflog-tlv
https://hackmd.io/@haindpwn/cve-2026-121943-121944-sngrep-sip-payload-missing-nul-oob-read