CVE-2022-27940

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getipv6next in common/get.c...

CVE-2022-27941

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getl2lenprotocol in common/get.c...

CVE-2022-27941

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getl2lenprotocol in common/get.c...

CVE-2022-27940

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getipv6next in common/get.c...

CVE-2022-27942

tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parsempls in common/get.c...

Heap overflow

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getl2lenprotocol in common/get.c...

CVE-2022-27942

Tcpreplay 4.4.1 (specifically tcpprep) contains CVE-2022-27942: a heap-based buffer over-read in parse_mpls (common/get.c), with impact described as memory safety risk. Public sources in connected docs outline that this vulnerability is present in Tcpreplay 4.4.1 and has been addressed in later r...

CVE-2022-27940

CVE-2022-27940 affects Tcpreplay 4.4.1’s tcprewrite component, with a heap-based buffer over-read in get_ipv6_next (common/get.c). Impact is partial confidentiality/integrity/availability; exploitability is shown in public advisories. Remediation consistently cited across sources is upgrading to ...

CVE-2022-27940

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getipv6next in common/get.c...

CVE-2022-27942

tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parsempls in common/get.c...

CVE-2022-27941

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getl2lenprotocol in common/get.c...

CVE-2022-27942

tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parsempls in common/get.c...

CVE-2022-27940

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getipv6next in common/get.c...

CVE-2022-27940

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getipv6next in common/get.c...

CVE-2022-27942

tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parsempls in common/get.c...

PT-2022-18710 · Tcpreplay +2 · Tcpreplay +2

Name of the Vulnerable Software and Affected Versions: Tcpreplay version 4.4.1 Description: The issue is related to a heap-based buffer over-read in the parse mpls function located in common/get.c. This occurs in the tcpprep component of Tcpreplay. Recommendations: For Tcpreplay version 4.4.1, at...

CVE-2022-27941

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getl2lenprotocol in common/get.c...

CVE-2022-27941

CVE-2022-27941 affects Tcpreplay v4.4.1 (tcprewrite) with a heap-based buffer over-read in get_l2len_protocol in common/get.c. The issue is addressed in later Tcpreplay versions (e.g., 4.4.2) per security advisories (ALT Linux/Mageia) and package updates; upgrade to 4.4.2+ to mitigate. Exploitati...

CVE-2022-27941

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getl2lenprotocol in common/get.c...

Design/Logic Flaw

slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router advertisement. NOTE: privilege separation and pledge can prevent exploitation...