Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The get_next_packet() function in the send_packets.c file uses the memcpy() function unsafely to copy sequences from the source buffer pktdata to the destination (*prev_packet)->pktdata. This will result in a Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a file.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-09-28T09:00:00

Updated: 2024-08-05T10:54:10.612Z

Reserved: 2018-09-28T00:00:00

Link: CVE-2018-17582

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-09-28T09:29:01.057

Modified: 2024-11-21T03:54:38.863

Link: CVE-2018-17582

cve-icon Redhat

No data.