A use-after-free was discovered in the tcpbridge binary of Tcpreplay 4.3.0 beta1. The issue gets triggered in the function postargs() at tcpbridge.c, causing a denial of service or possibly unspecified other impact.
tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a getc operation. The issue is being triggered in the function getipv6next() at common/get.c.
A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function getlayer4v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-258333 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c.
Tcpreplay before 4.3.1 has a heap-based buffer over-read in getl2len in common/get.c.
tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160.
An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in dochecksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function getipv6l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function getlayer4v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Tcpreplay v4.4.1 was discovered to contain a double-free via interceptorfree.
Tcpreplay v4.4.1 has a heap-based buffer overflow in dochecksummath at /tcpedit/checksum.c.
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in getl2lenprotocol at common/get.c:344. NOTE: this is different from CVE-2022-27941.
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in getipv6next at common/get.c:713. NOTE: this is different from CVE-2022-27940.
The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parsempls at common/get.c:150. NOTE: this is different from CVE-2022-27942.
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getl2lenprotocol in common/get.c.
tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parsempls in common/get.c.
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getipv6next in common/get.c.
tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c.
An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in getl2len() that can make tcpprep crash and cause a denial of service.
An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep crash and cause a denial of service.
getl2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packets, as demonstrated by tcpprep.
Tcpreplay version 4.4.1 contains a memory leakage flaw in fixipv6checksums() function. The highest threat from this vulnerability is to data confidentiality.
An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.
An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint.
An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the readhexstring function at the utils.c:309 endpoint.
An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint.
An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parselist function at the list.c:81 endpoint.
An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.
An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpeditdltcleanup function at plugins/dltplugins.c.
Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The getnextpacket() function in the sendpackets.c file uses the memcpy() function unsafely to copy sequences from the source buffer pktdata to the destination (prevpacket)->pktdata. This will result in a Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a file.