CVE-2024-22654: High severity Tcpreplay Tcpreplay vulnerability
tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/tcpreplayto a version that resolves this vulnerability.Fixed in 4.5.1-1 - Upgrade
Upgrade
debian/tcpreplayto a version that resolves this vulnerability.Fixed in 4.5.1-1Fixed in 4.5.4-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22654?
CVE-2024-22654 has been categorized as a high severity vulnerability due to its potential to cause an infinite loop in tcpreplay.
How does CVE-2024-22654 affect tcpreplay?
CVE-2024-22654 affects tcpreplay by causing an infinite loop during the execution of the tcprewrite function, which can lead to denial of service.
How do I fix CVE-2024-22654?
To fix CVE-2024-22654, update to version 4.4.5 or later of tcpreplay, which contains the necessary patches.
What are the potential impacts of CVE-2024-22654?
The potential impacts of CVE-2024-22654 include system downtime and resource exhaustion due to the infinite loop.
Is CVE-2024-22654 currently being exploited in the wild?
As of now, there are no confirmed reports of CVE-2024-22654 being actively exploited in the wild.