CVE-2025-51006: Double Free

Published Sep 22, 2025

Updated

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dltlinuxsll2cleanup() function in plugins/dltlinuxsll2/linuxsll2.c. This vulnerability is triggered when tcpeditdltcleanup() indirectly invokes the cleanup routine multiple times on the same memory region. By supplying a specifically crafted pcap file to the tcprewrite binary, a local attacker can exploit this flaw to cause a Denial of Service (DoS) via memory corruption.

Affected Software

2 affected components

Tcpreplay Tcpreplay

Broadcom Tcpreplay=4.5.1

Remediation

Patch Available

https://github.com/appneta/tcpreplay/issues/926

Event History

Sep 22, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·02:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-51006?

CVE-2025-51006 is classified as a critical severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2025-51006?

To fix CVE-2025-51006, update your tcpreplay software to the latest version that addresses this vulnerability.

What are the impacts of CVE-2025-51006?

The impact of CVE-2025-51006 includes potential application crashes and the ability for an attacker to execute arbitrary code.

Which versions of tcpreplay are affected by CVE-2025-51006?

CVE-2025-51006 affects all versions of tcpreplay prior to the patch release that addresses this vulnerability.

Is CVE-2025-51006 a common vulnerability?

CVE-2025-51006 is recognized as a serious and relatively common vulnerability in the tcpreplay package, highlighting the importance of secure coding practices.