CVE-2019-8377 — NULL Pointer Dereference in Tcpreplay

CWE-476 — NULL Pointer Dereference9 documents6 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 54.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Broadcom TcpreplayFedoraproject Fedora
Timeline
PublishedFeb 17
Latest updateMay 13

Description

An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶Debianbroadcom/tcpreplay< 4.3.1-2+3

Also affects: Fedora 28, 29, 30, 31, 32

🔴Vulnerability Details

3
GHSA
GHSA-4w4c-cf9c-3rj3: An issue was discovered in Tcpreplay 4↗2022-05-13
▶
OSV
CVE-2019-8377: An issue was discovered in Tcpreplay 4↗2019-02-17
▶
CVEList
CVE-2019-8377: An issue was discovered in Tcpreplay 4↗2019-02-17
▶

📋Vendor Advisories

1
Debian
CVE-2019-8377: tcpreplay - An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred ...↗2019
▶

💬Community

4
Bugzilla
CVE-2019-8377 tcpreplay: null pointer dereference in function get_ipv6_l4proto() in get.c↗2019-02-18
▶
Bugzilla
CVE-2019-8377 tcpreplay: null pointer dereference in function get_ipv6_l4proto() in get.c [epel-all]↗2019-02-18
▶
Bugzilla
CVE-2019-8377 tcpreplay: null pointer dereference in function get_ipv6_l4proto() in get.c [fedora-all]↗2019-02-18
▶
Bugzilla
CVE-2019-8377 tcpreplay: null pointer dereference in function get_ipv6_l4proto() in get.c [epel-all]↗2019-02-18
▶
CVE-2019-8377 — NULL Pointer Dereference in Tcpreplay | cvebase