CVE-2019-8377: Null Pointer Dereference
Published Feb 17, 2019
·Updated
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function getipv6l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Affected Software
6 affected components
Broadcom Tcpreplay=4.3.1
fedoraproject fedora=28
fedoraproject fedora=29
fedoraproject fedora=30
fedoraproject fedora=31
fedoraproject fedora=32
Event History
Feb 17, 2019
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·02:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-8377?
The severity of CVE-2019-8377 is high.
2
Which software versions are affected by CVE-2019-8377?
Tcpreplay version 4.3.1 is affected by CVE-2019-8377.
3
How can CVE-2019-8377 be triggered?
CVE-2019-8377 can be triggered by sending a crafted pcap file to the tcpreplay-edit binary.
4
What is the impact of CVE-2019-8377?
CVE-2019-8377 allows an attacker to cause a Denial of Service (Segmentation fault) or possibly execute arbitrary code.
5
Is there a fix available for CVE-2019-8377?
Yes, please refer to the provided references for a fix to CVE-2019-8377.