Broadcom: >> Tcpreplay >> 2.0.3 Security Vulnerabilities
A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function get_layer4_v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-258333 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score
5.3
EPSS Score
0.0
Published
2024-03-28
tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a get_c operation. The issue is being triggered in the function get_ipv6_next() at common/get.c.
CVSS Score
9.1
EPSS Score
0.005
Published
2020-05-08
Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c.
CVSS Score
7.8
EPSS Score
0.002
Published
2018-12-28
Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c.
CVSS Score
7.8
EPSS Score
0.002
Published
2018-12-28
Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an over-size packet.
CVSS Score
7.8
EPSS Score
0.004
Published
2017-03-15
tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service (segmentation fault) via a large frame, a related issue to CVE-2017-14266.
CVSS Score
7.5
EPSS Score
0.008
Published
2017-01-23