CVE-2023-4256 — Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c

Affected: tcpreplay, Fedora Extra Packages for Enterprise Linux, Fedora

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This flaw enables a local attacker to initiate a Denial of Service (DoS) attack.

USN-7231-1 — tcpreplay vulnerabilities

Affected: Ubuntu:Pro:16.04:LTS: tcpreplay, Ubuntu:Pro:18.04:LTS: tcpreplay, Ubuntu:Pro:20.04:LTS: tcpreplay, Ubuntu:Pro:22.04:LTS: tcpreplay, Ubuntu:Pro:24.04:LTS: tcpreplay

It was discovered that Tcpreplay incorrectly handled memory when using the tcprewrite utility. A remote attacker could possibly use this issue to cause Tcpreplay to crash, resulting in a denial of service. (CVE-2023-27783)

It was discovered that Tcpreplay incorrectly validated external input. A remote attacker could possibly use this issue to cause Tcpreplay to crash, resulting in a denial of service. (CVE-2023-27784, CVE-2023-27785, CVE-2023-27786, CVE-2023-27787, CVE-2023-27788, CVE-2023-27789)

It was discovered that Tcpreplay incorrectly handled memory when using the tcprewrite utility. An attacker could possibly use this issue to cause Tcpreplay to crash, resulting in a denial of service. (CVE-2023-4256, CVE-2023-43279)

Most recent entries from all

CVE-2023-4256 — Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c

USN-7231-1 — tcpreplay vulnerabilities