CVE-2019-8376 — NULL Pointer Dereference in Tcpreplay

CWE-476 — NULL Pointer Dereference8 documents6 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 53.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Broadcom TcpreplayFedoraproject Fedora
Timeline
PublishedFeb 17
Latest updateMay 13

Description

An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶Debianbroadcom/tcpreplay< 4.3.1-2+3

Also affects: Fedora 28, 29, 30

🔴Vulnerability Details

3
GHSA
GHSA-ff2p-6rhf-qvm3: An issue was discovered in Tcpreplay 4↗2022-05-13
▶
CVEList
CVE-2019-8376: An issue was discovered in Tcpreplay 4↗2019-02-17
▶
OSV
CVE-2019-8376: An issue was discovered in Tcpreplay 4↗2019-02-17
▶

📋Vendor Advisories

1
Debian
CVE-2019-8376: tcpreplay - An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred ...↗2019
▶

💬Community

3
Bugzilla
CVE-2019-8376 tcpreplay: null pointer dereference in function get_layer4_v6() in get.c [epel-all]↗2019-02-18
▶
Bugzilla
CVE-2019-8376 tcpreplay: null pointer dereference in function get_layer4_v6() in get.c↗2019-02-18
▶
Bugzilla
CVE-2019-8376 tcpreplay: null pointer dereference in function get_layer4_v6() in get.c [fedora-all]↗2019-02-18
▶