Heap-based Buffer Overflow

🗓️ 10 Oct 2022 21:19:14Reported by Veracode Vulnerability DatabaseType

tcppreplay vulnerable to heap-based buffer overflow in parse_mpl

Reporter	Title	Published	Views	Family All 37
ALT Linux	Security fix for the ALT Linux 9 package tcpreplay version 4.4.2-alt1	30 Nov 202200:00	–	altlinux
ATTACKERKB	CVE-2022-37049	18 Aug 202220:15	–	attackerkb
ATTACKERKB	CVE-2022-27942	26 Mar 202213:15	–	attackerkb
CNNVD	Appneta Tcpreplay 缓冲区错误漏洞	26 Mar 202200:00	–	cnnvd
CVE	CVE-2022-27942	26 Mar 202200:00	–	cve
Cvelist	CVE-2022-27942	26 Mar 202200:00	–	cvelist
Debian CVE	CVE-2022-27942	26 Mar 202200:00	–	debiancve
EUVD	EUVD-2022-32430	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 35 Update: tcpreplay-4.4.2-1.fc35	4 Sep 202222:59	–	fedora
Fedora	[SECURITY] Fedora 37 Update: tcpreplay-4.4.2-1.fc37	12 Sep 202217:52	–	fedora

Vulners

Node

broadcom tcpreplayMatch4.3.4-1debian

AND

broadcom tcpreplayMatch4.3.3-2debian

AND

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-27942
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/
security	www.security.gentoo.org/glsa/202210-08
github	www.github.com/appneta/tcpreplay/issues/719

07 Nov 2023 22:28Current

7.3High risk

Vulners AI Score7.3

CVSS 26.8

CVSS 3.17.8

EPSS0.00264