Vulnerabilities (CVE)

Filtered by vendor Appneta Subscribe
Filtered by product Tcpreplay
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-24266 1 Appneta 1 Tcpreplay 2021-05-26 5.0 MEDIUM 7.5 HIGH
An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that can make tcpprep crash and cause a denial of service.
CVE-2020-24265 1 Appneta 1 Tcpreplay 2021-05-26 5.0 MEDIUM 7.5 HIGH
An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep crash and cause a denial of service.
CVE-2019-8377 2 Appneta, Fedoraproject 2 Tcpreplay, Fedora 2020-06-25 6.8 MEDIUM 7.8 HIGH
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
CVE-2018-17582 1 Appneta 1 Tcpreplay 2019-10-03 5.8 MEDIUM 7.1 HIGH
Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The get_next_packet() function in the send_packets.c file uses the memcpy() function unsafely to copy sequences from the source buffer pktdata to the destination (*prev_packet)->pktdata. This will result in a Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a file.
CVE-2018-17580 1 Appneta 1 Tcpreplay 2019-10-03 5.8 MEDIUM 7.1 HIGH
A heap-based buffer over-read exists in the function fast_edit_packet() in the file send_packets.c of Tcpreplay v4.3.0 beta1. This can lead to Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a crafted pcap file.
CVE-2019-8381 2 Appneta, Fedoraproject 2 Tcpreplay, Fedora 2019-03-30 6.8 MEDIUM 7.8 HIGH
An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
CVE-2019-8376 2 Appneta, Fedoraproject 2 Tcpreplay, Fedora 2019-03-30 6.8 MEDIUM 7.8 HIGH
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
CVE-2018-13112 1 Appneta 1 Tcpreplay 2019-03-06 5.0 MEDIUM 7.5 HIGH
get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packets, as demonstrated by tcpprep.
CVE-2018-20552 1 Appneta 1 Tcpreplay 2019-01-06 6.8 MEDIUM 7.8 HIGH
Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c.
CVE-2018-20553 1 Appneta 1 Tcpreplay 2019-01-06 6.8 MEDIUM 7.8 HIGH
Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c.
CVE-2016-6160 1 Appneta 1 Tcpreplay 2017-09-26 5.0 MEDIUM 7.5 HIGH
tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service (segmentation fault) via a large frame, a related issue to CVE-2017-14266.