CVE-2018-17582: High severity tcpreplay vulnerability
Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The getnextpacket() function in the sendpackets.c file uses the memcpy() function unsafely to copy sequences from the source buffer pktdata to the destination (prevpacket)->pktdata. This will result in a Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-17582?
CVE-2018-17582 is a vulnerability in Tcpreplay v4.3.0 beta1 that allows a heap-based buffer over-read, leading to a Denial of Service (DoS).
How severe is the vulnerability CVE-2018-17582?
The severity of CVE-2018-17582 is high with a CVSS score of 7.1.
Which software versions are affected by CVE-2018-17582?
Tcpreplay v4.3.0 beta1 and beta2 are affected by CVE-2018-17582.
How can I fix the vulnerability CVE-2018-17582?
To fix CVE-2018-17582, upgrade to a version of Tcpreplay that is not affected by the vulnerability.
Where can I find more information about CVE-2018-17582?
More information about CVE-2018-17582 can be found in the references provided: [link1](https://github.com/SegfaultMasters/covering360/blob/master/tcpreplay), [link2](https://github.com/appneta/tcpreplay/issues/484).