Published: 17/02/2019 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

An issue exists in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an malicious user to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Vulnerable Product	Search on Vulmon	Subscribe to Product
broadcom tcpreplay 4.3.1
fedoraproject fedora 28
fedoraproject fedora 29
fedoraproject fedora 30
fedoraproject fedora 31
fedoraproject fedora 32

Debian Bug report logs - #922622 tcpreplay: CVE-2019-8381 Package: src:tcpreplay; Maintainer for src:tcpreplay is Christoph Biedl <debianaxhn@manchmalin-ulmde>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 18 Feb 2019 14:45:08 UTC Severity: important Tags: security, upstream Found in version t ...

Debian Bug report logs - #922623 tcpreplay: CVE-2019-8377 Package: src:tcpreplay; Maintainer for src:tcpreplay is Christoph Biedl <debianaxhn@manchmalin-ulmde>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 18 Feb 2019 14:45:11 UTC Severity: important Tags: security, upstream Found in version t ...

Debian Bug report logs - #922624 tcpreplay: CVE-2019-8376 Package: src:tcpreplay; Maintainer for src:tcpreplay is Christoph Biedl <debianaxhn@manchmalin-ulmde>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 18 Feb 2019 14:48:02 UTC Severity: important Tags: security, upstream Found in version t ...

An issue was discovered in Tcpreplay 431 A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at getc This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact ...

CWE-476 https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-function-get_ipv6_l4proto-tcpreplay-4-3-1/https://github.com/appneta/tcpreplay/issues/536 http://www.securityfocus.com/bid/107085 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MLPY6W7Z7G6PF2JN4LXXHCACYLD4RBG6/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4V3SADKXUSHWTVAPU3WLXBDEQUHRA6ZO/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EB3ASS7URTIA3IFSBL2DIWJAFKTBJCAW/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4YAT4AGTHQKB74ETOQPJMV67TSDIAPOC/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UOSEIQ3D2OONCJEVMGC2TYBC2QX4E5EJ/https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=922622

CVE-2019-8377

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect