CVE-2023-36192: 
NixOS vulnerability analysis and mitigation

Sngrep v1.6.0 contains a heap buffer overflow vulnerability in the function capturewscheck_packet located in /src/capture.c. The vulnerability was discovered and disclosed on June 22, 2023, affecting the sngrep packet analyzer tool (NVD, CVE).

The vulnerability is classified as a heap buffer overflow (CWE-787: Out-of-bounds Write) with a CVSS v3.1 base score of 7.8 (HIGH). The attack vector is local (AV:L) with low attack complexity (AC:L), requiring no privileges (PR:N) but user interaction (UI:R). The scope is unchanged (S:U) with high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H) (NVD).

The vulnerability can lead to a heap buffer overflow condition when processing packets, potentially allowing attackers to cause a denial of service or possibly execute arbitrary code. The issue affects multiple versions of the software across different distributions, including Debian Bullseye and Bookworm releases (Debian Security).

The vulnerability has been fixed in sngrep version 1.8.2. Users are advised to upgrade to this version or later. Debian has marked this as fixed in their sid and trixie distributions with version 1.8.2-1 (Debian Security).