RSS   Vulnerabilities for 'Tcpreplay'   RSS

2022-02-11
 
CVE-2021-45386

CWE-617
 

 
tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c

 
 
CVE-2021-45387

CWE-617
 

 
tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4() at tree.c.

 
2021-09-22
 
CVE-2020-23273

CWE-787
 

 
Heap-buffer overflow in the randomize_iparp function in edit_packet.c. of Tcpreplay v4.3.2 allows attackers to cause a denial of service (DOS) via a crafted pcap.

 
2021-08-25
 
CVE-2020-18976

CWE-120
 

 
Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'do_checksum' function in 'checksum.c'. It can be triggered by sending a crafted pcap file to the 'tcpreplay-edit' binary. This issue is different than CVE-2019-8381.

 
2020-10-19
 
CVE-2020-24266

CWE-787
 

 
An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that can make tcpprep crash and cause a denial of service.

 
 
CVE-2020-24265

CWE-787
 

 
An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep crash and cause a denial of service.

 
2020-05-08
 
CVE-2020-12740

CWE-125
 

 
tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a get_c operation. The issue is being triggered in the function get_ipv6_next() at common/get.c.

 
2019-02-16
 
CVE-2019-8381

CWE-119
 

 
An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

 
 
CVE-2019-8377

CWE-476
 

 
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

 
 
CVE-2019-8376

CWE-476
 

 
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

 


Copyright 2022, cxsecurity.com

 

Back to Top