Debian Tcpreplay vulnerabilities

CVE-2017-14266 [HIGH] CVE-2017-14266: tcpreplay - tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability tri... tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160. Scope: local bookworm: resolved (fixed in 3.4.4-3) bullseye: resolved (fixed in 3.4.4-3) forky: resolved (fixed in 3.4.4-3) sid: resolved (fixed in 3.4.4-3) trixie: resolved (fixed in 3.4.4-3)

CVE-2022-28487 [HIGH] CVE-2022-28487: tcpreplay - Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() f... Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality. Scope: local bookworm: resolved (fixed in 4.4.2-1) bullseye: open forky: resolved (fixed in 4.4.2-1) sid: resolved (fixed in 4.4.2-1) trixie: resolved (fixed in 4.4.2-1)

CVE-2020-12740 [CRITICAL] CVE-2020-12740: tcpreplay - tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a... tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a get_c operation. The issue is being triggered in the function get_ipv6_next() at common/get.c. Scope: local bookworm: resolved (fixed in 4.3.3-1) bullseye: resolved (fixed in 4.3.3-1) forky: resolved (fixed in 4.3.3-1) sid: resolved (fixed in 4.3.3-1) trixie: resolved (fixed in 4.

CVE-2025-51006 [HIGH] CVE-2025-51006: tcpreplay - Within tcpreplay's tcprewrite, a double free vulnerability has been identified i... Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dlt_linuxsll2_cleanup() function in plugins/dlt_linuxsll2/linuxsll2.c. This vulnerability is triggered when tcpedit_dlt_cleanup() indirectly invokes the cleanup routine multiple times on the same memory region. By supplying a specifically crafted pcap file to the tcprewrite binar

CVE-2024-22654 [HIGH] CVE-2024-22654: tcpreplay - tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite f... tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 4.5.1-1) sid: resolved (fixed in 4.5.1-1) trixie: resolved (fixed in 4.5.1-1)

CVE-2023-27789 [HIGH] CVE-2023-27789: tcpreplay - An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of ... An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 4.4.4-1) sid: resolved (fixed in 4.4.4-1) trixie: resolved (fixed in 4.4.4-1)

CVE-2023-27784 [HIGH] CVE-2023-27784: tcpreplay - An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial o... An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 4.4.4-1) sid: resolved (fixed in 4.4.4-1) trixie: resolved (fixed in 4.4.4-1)

CVE-2023-27788 [HIGH] CVE-2023-27788: tcpreplay - An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial ... An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 4.4.4-1) sid: resolved (fixed in 4.4.4-1) trixie: resolved (fixed in 4.4.4-1)

CVE-2020-24266 [HIGH] CVE-2020-24266: tcpreplay - An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer over... An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that can make tcpprep crash and cause a denial of service. Scope: local bookworm: resolved (fixed in 4.3.4-1) bullseye: open forky: resolved (fixed in 4.3.4-1) sid: resolved (fixed in 4.3.4-1) trixie: resolved (fixed in 4.3.4-1)

CVE-2020-24265 [HIGH] CVE-2020-24265: tcpreplay - An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer over... An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep crash and cause a denial of service. Scope: local bookworm: resolved (fixed in 4.3.4-1) bullseye: open forky: resolved (fixed in 4.3.4-1) sid: resolved (fixed in 4.3.4-1) trixie: resolved (fixed in 4.3.4-1)

CVE-2018-18408 [CRITICAL] CVE-2018-18408: tcpreplay - A use-after-free was discovered in the tcpbridge binary of Tcpreplay 4.3.0 beta1... A use-after-free was discovered in the tcpbridge binary of Tcpreplay 4.3.0 beta1. The issue gets triggered in the function post_args() at tcpbridge.c, causing a denial of service or possibly unspecified other impact. Scope: local bookworm: resolved (fixed in 4.3.1-1) bullseye: resolved (fixed in 4.3.1-1) forky: resolved (fixed in 4.3.1-1) sid: resolved (fixed

CVE-2022-27418 [HIGH] CVE-2022-27418: tcpreplay - Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedi... Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c. Scope: local bookworm: resolved (fixed in 4.4.1-1) bullseye: open forky: resolved (fixed in 4.4.1-1) sid: resolved (fixed in 4.4.1-1) trixie: resolved (fixed in 4.4.1-1)

CVE-2023-27783 [HIGH] CVE-2023-27783: tcpreplay - An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause... An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 4.4.4-1) sid: resolved (fixed in 4.4.4-1) trixie: resolved (fixed in 4.4.4-1)

CVE-2023-27787 [HIGH] CVE-2023-27787: tcpreplay - An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of ... An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 4.4.4-1) sid: resolved (fixed in 4.4.4-1) trixie: resolved (fixed in 4.4.4-1)

CVE-2023-27785 [HIGH] CVE-2023-27785: tcpreplay - An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a ... An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 4.4.4-1) sid: resolved (fixed in 4.4.4-1) trixie: resolved (fixed in 4.4.4-1)

CVE-2018-13112 [HIGH] CVE-2018-13112: tcpreplay - get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to ca... get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packets, as demonstrated by tcpprep. Scope: local bookworm: resolved (fixed in 4.3.1-1) bullseye: resolved (fixed in 4.3.1-1) forky: resolved (fixed in 4.3.1-1) sid: resolved (fixed in 4.3.1-1) trix

CVE-2016-6160 [HIGH] CVE-2016-6160: tcpreplay - tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial o... tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service (segmentation fault) via a large frame, a related issue to CVE-2017-14266. Scope: local bookworm: resolved (fixed in 3.4.4-3) bullseye: resolved (fixed in 3.4.4-3) forky: resolved (fixed in 3.4.4-3) sid: resolved (fixed in 3.4.4-3) trixie: resolved (fixed in 3.4.4-3)

CVE-2022-27942 [HIGH] CVE-2022-27942: tcpreplay - tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in co... tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c. Scope: local bookworm: resolved (fixed in 4.4.2-1) bullseye: open forky: resolved (fixed in 4.4.2-1) sid: resolved (fixed in 4.4.2-1) trixie: resolved (fixed in 4.4.2-1)

CVE-2022-27940 [HIGH] CVE-2022-27940: tcpreplay - tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next... tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c. Scope: local bookworm: resolved (fixed in 4.4.2-1) bullseye: open forky: resolved (fixed in 4.4.2-1) sid: resolved (fixed in 4.4.2-1) trixie: resolved (fixed in 4.4.2-1)

CVE-2022-27941 [HIGH] CVE-2022-27941: tcpreplay - tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_pro... tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c. Scope: local bookworm: resolved (fixed in 4.4.2-1) bullseye: open forky: resolved (fixed in 4.4.2-1) sid: resolved (fixed in 4.4.2-1) trixie: resolved (fixed in 4.4.2-1)