CVE-2023-43279 — NULL Pointer Dereference in Tcpreplay

CWE-476 — NULL Pointer Dereference7 documents6 sources
Severity
6.5MEDIUMNVD
EPSS
0.0%
top 97.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Broadcom TcpreplayFedoraproject Fedora
Timeline
PublishedMar 12
Latest updateJan 28

Description

Null Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to crash the application via crafted tcprewrite command.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶Debianbroadcom/tcpreplay< 4.5.1-1+1

Also affects: Fedora 38, 39, 40

🔴Vulnerability Details

4
OSV
tcpreplay vulnerabilities↗2025-01-28
▶
GHSA
GHSA-34xc-f3c2-9gxw: Null Pointer Dereference in mask_cidr6 component at cidr↗2024-03-13
▶
OSV
CVE-2023-43279: Null Pointer Dereference in mask_cidr6 component at cidr↗2024-03-12
▶
CVEList
CVE-2023-43279: Null Pointer Dereference in mask_cidr6 component at cidr↗2024-03-12
▶

📋Vendor Advisories

2
Ubuntu
Tcpreplay vulnerabilities↗2025-01-28
▶
Debian
CVE-2023-43279: tcpreplay - Null Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 al...↗2023
▶
CVE-2023-43279 — NULL Pointer Dereference in Tcpreplay | cvebase