TCPreplay 安全漏洞

Appneta Tcpreplay is a set of open source utilities for editing and replaying network traffic for UNIX-based operating systems from Appneta, USA. A security vulnerability exists in TCPreplay tcprewrite version v.4.4.3. An attacker has exploited this vulnerability to cause a denial of service via...

CVE-2023-27784

An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the readhexstring function at the utils.c:309 endpoint...

CVE-2023-27785

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function...

CVE-2023-27785

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function...

CVE-2023-27785

CVE-2023-27785 affects TCPreplay TCPprep v4.4.3 and allows remote denial of service via the parse endpoints function. Public advisories indicate fixes have been released (e.g., Mageia MGASA-2023-0188 and Ubuntu USN-7231-1) and patches are available; upgrading TCPreplay to a patched release is the...

CVE-2023-27783

An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpeditdltcleanup function at plugins/dltplugins.c...

CVE-2023-27784

CVE-2023-27784 affects TCPReplay/TCPreplay v4.4.3, where the read_hexstring function in utils.c:309 can be abused by a remote attacker to cause a denial of service. Public sources in the connected set corroborate this as part of multiple tcpreplay vulnerabilities and indicate a patch is available...

CVE-2023-27784

An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the readhexstring function at the utils.c:309 endpoint...

CVE-2023-27785

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function...

CVE-2023-27783

An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpeditdltcleanup function at plugins/dltplugins.c...

Debian: Security Advisory (DLA-544-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-9851 · Tcpreplay +3 · Tcpreplay +3

Name of the Vulnerable Software and Affected Versions: TCPreplay tcprewrite version 4.4.3 Description: The issue allows a remote attacker to cause a denial of service via the tcpedit dlt cleanup function at plugins/dlt plugins.c. This is related to an uncontrolled reachable assertion in the tcped...

PT-2023-9849 · Tcpreplay +3 · Tcpreplay +3

Name of the Vulnerable Software and Affected Versions: TCPreplay TCPprep version 4.4.3 Description: The issue allows a remote attacker to cause a denial of service via the parse endpoints function, which is related to pointer dereferencing. This can be exploited by a remote attacker to cause a...

PT-2023-9852 · Tcpreplay +3 · Tcpreplay +3

Name of the Vulnerable Software and Affected Versions: Tcpreplay version 4.4.3 Description: The issue is related to the cidr2cidr function in the Tcpreplay utility, which can cause a denial of service when exploited by a remote attacker. This function is part of the PCAP file handler and is...

SUSE CVE-2016-6160

tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service segmentation fault via a large frame, a related issue to CVE-2017-14266...

SUSE CVE-2017-6429

Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an over-size packet...

SUSE CVE-2017-14266

tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160...

SUSE CVE-2018-13112

getl2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packets, as demonstrated by tcpprep...

SUSE CVE-2018-17580

A heap-based buffer over-read exists in the function fasteditpacket in the file sendpackets.c of Tcpreplay v4.3.0 beta1. This can lead to Denial of Service DoS and potentially Information Exposure when the application attempts to process a crafted pcap file...

SUSE CVE-2018-17582

Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The getnextpacket function in the sendpackets.c file uses the memcpy function unsafely to copy sequences from the source buffer pktdata to the destination prevpacket-pktdata. This will result in a Denial of Service DoS and potentially...