CVE-2018-20552

Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c...

CVE-2018-20552

CVE-2018-20552 affects Tcpreplay before 4.3.1, with a heap-based buffer over-read in packet2tree (tree.c). The issue can cause an application crash and, per multiple sources, may lead to denial of service or exposure of sensitive data. Affected users should upgrade to 4.3.1 or later (the fixed ve...

PT-2018-15425 · Aqua Security +3 · Tcpreplay +3

Name of the Vulnerable Software and Affected Versions: Tcpreplay versions prior to 4.3.1 Description: The issue is a heap-based buffer over-read in the packet2tree function located in tree.c. This indicates a problem where more data is read from a buffer than it actually contains, potentially...