CVE-2022-27418: Buffer Overflow
Tcpreplay v4.4.1 has a heap-based buffer overflow in dochecksummath at /tcpedit/checksum.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/tcpreplayto a version that resolves this vulnerability.Fixed in 4.4.3-1Fixed in 4.5.1-1Fixed in 4.5.4-1 - Upgrade
Upgrade
debian/tcpreplayto a version that resolves this vulnerability.Fixed in 4.4.1-1
Event History
Frequently Asked Questions
What is CVE-2022-27418?
CVE-2022-27418 is a vulnerability in Tcpreplay v4.4.1 that allows for a heap-based buffer overflow in the do_checksum_math function in /tcpedit/checksum.c.
What is the severity of CVE-2022-27418?
CVE-2022-27418 has a severity rating of 7.8 (high).
How does CVE-2022-27418 impact Broadcom Tcpreplay?
CVE-2022-27418 affects Broadcom Tcpreplay version 4.4.1.
How can I fix CVE-2022-27418?
To fix CVE-2022-27418, update Tcpreplay to a version that is not affected by the vulnerability.
Where can I find more information about CVE-2022-27418?
You can find more information about CVE-2022-27418 at the following references: [Link 1](https://github.com/appneta/tcpreplay/issues/703), [Link 2](https://security.gentoo.org/glsa/202210-08).