Irontec vulnerabilities
We track 4 vulnerabilities in Irontec products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 12, 2026.
Latest Irontec vulnerabilities
- 9.8 Critical severity
sngrep: Stack-based Buffer Overflow
sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to
- 7.5 High severity
sngrep: Heap-based Buffer Overflow
Irontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp_check_packet at /sngrep/src/rtp.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SIP packet.
- 9.8 Critical severity
sngrep: Out-of-bounds Write
A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers in the sip_validate_packet and sip_parse_extra_header
- 9.8 Critical severity
sngrep: Out-of-bounds Write
A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions sip_get_callid and sip_get_xcallid in sip.c use the strncpy function to copy header contents into fi