CVE-2025-9157

A flaw was found in tcpreplay. A use-after-free issue can be triggered when a specially crafted packet file is processed, specifically when IPv4 checksum re-calculation needs to be performed, causing a crash and resulting in a denial of service...

CVE-2025-9157

CVE-2025-9157 affects tcpreplay (up to 4.5.2-beta2) via the untrunc_packet function in src/tcpedit/edit_packet.c of the tcprewrite component, enabling a local use-after-free condition. OpenSUSE/SUSE advisories (openSUSE-SU-2025-20119-1, related Fedora/openSUSE OSS entries) explicitly cite securit...