CVE-2020-18976

CWE-120 — Classic Buffer Overflow5 documents5 sources
Severity
5.5MEDIUM
EPSS
0.3%
top 49.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Broadcom Tcpreplay
Timeline
PublishedAug 25
Latest updateMay 24

Description

Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'do_checksum' function in 'checksum.c'. It can be triggered by sending a crafted pcap file to the 'tcpreplay-edit' binary. This issue is different than CVE-2019-8381.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶Debiantcpreplay< 4.3.3-1+3

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-v6p2-879w-fx47: Buffer Overflow in Tcpreplay v4↗2022-05-24
▶
CVEList
CVE-2020-18976: Buffer Overflow in Tcpreplay v4↗2021-08-25
▶
OSV
CVE-2020-18976: Buffer Overflow in Tcpreplay v4↗2021-08-25
▶

📋Vendor Advisories

1
Debian
CVE-2020-18976: tcpreplay - Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Servic...↗2020
▶
CVE-2020-18976 (MEDIUM CVSS 5.5) | Buffer Overflow in Tcpreplay v4.3.2 | cvebase.io