CVE-2023-31982: 
NixOS vulnerability analysis and mitigation

Sngrep version 1.6.0 was discovered to contain a heap buffer overflow vulnerability, identified as CVE-2023-31982. The vulnerability was found in the capturepacketreasm_ip function located in the /src/capture.c file. This security issue affects the Sngrep packet capture and analysis tool (GitHub Issue, NVD).

The vulnerability is classified as a heap buffer overflow (CWE-787: Out-of-bounds Write) with a CVSS v3.1 base score of 7.8 (HIGH). The attack vector is local (AV:L), with low attack complexity (AC:L), requiring no privileges (PR:N) but user interaction (UI:R). The scope is unchanged (S:U), with high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H) (NVD).

The heap buffer overflow vulnerability can lead to potential code execution, system crashes, or memory corruption. The high CVSS impact scores for confidentiality, integrity, and availability indicate that successful exploitation could result in significant system compromise (NVD).

The vulnerability has been fixed in versions after 1.6.0. Users are advised to upgrade to the latest version of sngrep. The issue is confirmed as fixed in version 1.8.2 (Debian Tracker).