CVE-2022-25484: Medium severity Broadcom Tcpreplay vulnerability
Published Mar 22, 2022
·Updated
tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1.
Affected Software
5 affected componentsFixes available
Broadcom Tcpreplay=4.4.1
debian/tcpreplay<4.4.2-1
4.4.2-1
debian/tcpreplay<4.4.2-1
4.4.2-1
debian/tcpreplay<4.4.2-1
4.4.2-1
debian/tcpreplay
4.4.3-14.5.1-14.5.4-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/tcpreplayto a version that resolves this vulnerability.Fixed in 4.4.3-1Fixed in 4.5.1-1Fixed in 4.5.4-1 - Upgrade
Upgrade
debian/tcpreplayto a version that resolves this vulnerability.Fixed in 4.4.2-1
Event History
Mar 22, 2022
CVE Published
via MITRE·04:49 PM
Data Sourced
via MITRE·04:49 PM
Description
Data Sourced
via OSV·05:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2022-25484.
2
What is the severity of CVE-2022-25484?
The severity of CVE-2022-25484 is medium (5.5).
3
Which software is affected by CVE-2022-25484?
Tcpreplay version 4.4.1 by Broadcom is affected by CVE-2022-25484.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-25484?
The CWE ID for CVE-2022-25484 is CWE-617.
5
Is there a reference for CVE-2022-25484?
Yes, you can find more information about CVE-2022-25484 at: [link](https://github.com/appneta/tcpreplay/issues/715)