PT-2018-14067 · Acutect+2 · Tcpreplay+2

Publicado 2018-09-28 · Atualizado 2024-06-15 · CVE-2018-17580

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tcpreplay version 4.3.0 beta1

Description A heap-based buffer over-read exists in the fast edit packet() function, located in the send packets.c file. This issue can lead to Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a crafted pcap file.

Recommendations For Tcpreplay version 4.3.0 beta1, consider avoiding the use of crafted pcap files until a patch is available. As a temporary workaround, restrict the processing of pcap files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2018-17580

MGASA-2019-0094

OPENSUSE-SU-2024:11426-1

USN-5205-1

Produtos afetados

Linuxmint

Tcpreplay

Ubuntu

Referências · 40

• 🔥 https://github.com/appneta/tcpreplay/issues/485 · Exploit
• 🔥 https://github.com/SegfaultMasters/covering360/blob/master/tcpreplay · Exploit
• https://ubuntu.com/security/CVE-2020-24265 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-17974 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-5205-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-17580 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11426-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-18408 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2020-12740 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-17580 · Nota de Segurança
• https://ubuntu.com/security/CVE-2020-24266 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-17582 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-17580 · Nota de Segurança
• https://suse.com/security/cve/CVE-2020-24266 · Nota
• https://ubuntu.com/security/CVE-2018-20553 · Aviso do Fabricante