Skip to content
OpenAdvisories
Unscored USN-5205-1 13 CVEs

tcpreplay vulnerabilities

Published Oct 4, 2022 · Updated Jun 25, 2026

Summary

It was discovered that Tcpreplay incorrectly handled certain specially crafted
packet capture input when processed by tcpprep. An attacker could possibly use
this issue to cause a denial of service. This issue only affected
Ubuntu 18.04 ESM. (CVE-2018-13112)

It was discovered that Tcpreplay incorrectly handled certain specially crafted
packet capture input. An attacker could possibly use this issue to cause a denial
of service or expose sensitive information. This issue only affected
Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-17580, CVE-2018-17582)

It was discovered that Tcpreplay incorrectly handled certain specially crafted
packet capture input. An attacker could possibly use this issue to cause a denial
of service. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM.
(CVE-2018-17974, CVE-2018-18407)

It was discovered that a use-after-free existed in Tcpreplay in the tcpbridge
binary. An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-18408)

It was discovered that Tcpreplay incorrectly handled certain specially crafted
packet capture input. An attacker could possibly use this issue to cause a
denial of service. This issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 ESM
and Ubuntu 20.04 ESM. (CVE-2018-20552, CVE-2018-20553)

It was discovered that a heap-based buffer over-read that existed in Tcpreplay
caused an application crash when tcprewrite or tcpreplay-edit received specially
crafted packet capture input. An attacker could possibly use this to cause a
denial of service or to expose sensitive information. This issue only affected
Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-12740)

It was discovered that Tcpreplay incorrectly handled certain specially crafted
packet capture input when processed by tcpprep. An attacker could possibly use
this issue to cause a denial of service. This issue only affected
Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-24265, CVE-2020-24266)

It was discovered that Tcpreplay incorrectly handled certain specially crafted
packet capture input when processed by tcprewrite. An attacker could possibly
use this issue to cause a denial of service. This issue only affected Ubuntu
22.04 ESM. (CVE-2022-27416)

It was discovered that Tcpreplay did not properly manage memory under certain
circumstances. If a user were tricked into opening a specially crafted packet
capture file, a remote attacker could possibly use this issue to cause
Tcpreplay crash, resulting in a denial of service, or possibly read sensitive
data. This issue only affected Ubuntu 18.04 ESM, Ubuntu 20.04 ESM and Ubuntu
22.04 ESM. (CVE-2022-28487)

Fixed packages 4

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS tcpreplay 3.4.4-2+deb8u1ubuntu0.1~esm2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS tcpreplay 4.2.6-1ubuntu0.1~esm4
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS tcpreplay 4.3.2-1ubuntu0.1~esm2
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS tcpreplay 4.3.4-1ubuntu0.1~esm1

Vulnerabilities 13

References

  • report
    https://ubuntu.com/security/CVE-2018-13112
  • report
    https://ubuntu.com/security/CVE-2018-17580
  • report
    https://ubuntu.com/security/CVE-2018-17582
  • report
    https://ubuntu.com/security/CVE-2018-17974
  • report
    https://ubuntu.com/security/CVE-2018-18407
  • report
    https://ubuntu.com/security/CVE-2018-18408
  • report
    https://ubuntu.com/security/CVE-2018-20552
  • report
    https://ubuntu.com/security/CVE-2018-20553
  • report
    https://ubuntu.com/security/CVE-2020-12740
  • report
    https://ubuntu.com/security/CVE-2020-24265
  • report
    https://ubuntu.com/security/CVE-2020-24266
  • report
    https://ubuntu.com/security/CVE-2022-27416
  • report
    https://ubuntu.com/security/CVE-2022-28487