CVE-2019-8376: Null Pointer Dereference

Published Feb 17, 2019

Updated

An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function getlayer4v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Affected Software

4 affected components

Broadcom Tcpreplay=4.3.1

fedoraproject fedora=28

fedoraproject fedora=29

fedoraproject fedora=30

Event History

Feb 17, 2019

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Data Sourced

via NVD·02:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2019-8376?

CVE-2019-8376 is a vulnerability in Tcpreplay 4.3.1 that allows an attacker to cause a Denial of Service (Segmentation fault) or potentially have other impacts.

How severe is CVE-2019-8376?

CVE-2019-8376 has a severity score of 7.8 (High).

How does CVE-2019-8376 affect the affected software?

CVE-2019-8376 affects Tcpreplay 4.3.1 and possibly certain versions of Fedoraproject Fedora.

How can the NULL pointer dereference vulnerability in Tcpreplay 4.3.1 be triggered?

The NULL pointer dereference vulnerability in Tcpreplay 4.3.1 can be triggered by sending a crafted pcap file to the tcpreplay-edit binary.

Are there any fixes or patches available for CVE-2019-8376?

Please refer to the provided references for information on available fixes or patches for CVE-2019-8376.