Summary
It was discovered that Tcpreplay incorrectly handled memory when using the
tcprewrite utility. A remote attacker could possibly use this issue to
cause Tcpreplay to crash, resulting in a denial of service.
(CVE-2023-27783)
It was discovered that Tcpreplay incorrectly validated external input. A
remote attacker could possibly use this issue to cause Tcpreplay to crash,
resulting in a denial of service. (CVE-2023-27784, CVE-2023-27785,
CVE-2023-27786, CVE-2023-27787, CVE-2023-27788, CVE-2023-27789)
It was discovered that Tcpreplay incorrectly handled memory when using the
tcprewrite utility. An attacker could possibly use this issue to cause
Tcpreplay to crash, resulting in a denial of service. (CVE-2023-4256,
CVE-2023-43279)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | tcpreplay | 3.4.4-2+deb8u1ubuntu0.1~esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | tcpreplay | 4.2.6-1ubuntu0.1~esm5 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | tcpreplay | 4.3.2-1ubuntu0.1~esm3 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | tcpreplay | 4.3.4-1ubuntu0.1~esm2 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | tcpreplay | 4.4.4-1ubuntu0.1~esm1 |
Vulnerabilities 9
-
High 7.5
An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dl…
-
High 7.5
An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring functi…
-
High 7.5
An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoin…
-
High 7.5
An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.
-
High 7.5
An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at …
-
High 7.5
An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function …
-
High 7.5
An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at t…
-
Medium 6.5
Null Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to crash the application…
-
Medium 5.5
Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c
Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This flaw…
References
-
report
https://ubuntu.com/security/CVE-2023-4256
-
report
https://ubuntu.com/security/CVE-2023-27783
-
report
https://ubuntu.com/security/CVE-2023-27784
-
report
https://ubuntu.com/security/CVE-2023-27785
-
report
https://ubuntu.com/security/CVE-2023-27786
-
report
https://ubuntu.com/security/CVE-2023-27787
-
report
https://ubuntu.com/security/CVE-2023-27788
-
report
https://ubuntu.com/security/CVE-2023-27789
-
report
https://ubuntu.com/security/CVE-2023-43279