Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-4256
HistoryDec 21, 2023 - 12:00 a.m.

CVE-2023-4256

2023-12-2100:00:00
ubuntu.com
ubuntu.com
9
tcprewrite
double free
vulnerability
specific file
local dos attack
tcpreplay

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

10.2%

Within tcpreplay’s tcprewrite, a double free vulnerability has been
identified in the tcpedit_dlt_cleanup() function within
plugins/dlt_plugins.c. This vulnerability can be exploited by supplying a
specifically crafted file to the tcprewrite binary. This flaw enables a
local attacker to initiate a Denial of Service (DoS) attack.

Bugs

Notes

Author Note
Priority reason: CLI tool crash only

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

10.2%