PT-2023-2339 · Tcpreplay+5 · Tcpreplay+5

Archanawind · Publicado 2023-03-16 · Atualizado 2025-01-28 · CVE-2023-27786

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions TCPprep version 4.4.3

Description The issue allows a remote attacker to cause a denial of service via the macinstring function. This is related to pointer dereference errors in the Tcpreplay utility for editing and replaying PCAP files.

Recommendations For TCPprep version 4.4.3, consider disabling the macinstring function as a temporary workaround until a patch is available.

Exploit

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2023-6893

BDU:2023-02104

CVE-2023-27786

MGASA-2023-0188

OPENSUSE-SU-2023:0267-1

OPENSUSE-SU-2024:13108-1

USN-7231-1

Produtos afetados

Alt Linux

Debian

Linuxmint

Tcpprep

Tcpreplay

Ubuntu

Referências · 36

• 🔥 https://github.com/appneta/tcpreplay/issues/782 · Exploit
• https://github.com/appneta/tcpreplay/pull/783 · Correção
• https://bdu.fstec.ru/vul/2023-02104 · Nota de Segurança
• https://osv.dev/vulnerability/openSUSE-SU-2023:0267-1 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2023-0188.html · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V · Aviso do Fabricante
• https://t.me/cvenotify/50407 · Publicação no Telegram
• https://bugs.mageia.org/show_bug.cgi?id=31926 · Nota
• https://ubuntu.com/security/CVE-2023-27787 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-27783 · Nota
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-27783 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-27786 · Aviso do Fabricante
• https://lists.opensuse.org/archives/list/[e-mail]/thread/WHVN36IVFXJ2224ASIQPWW2NGLN7SXGF · Nota
• https://security-tracker.debian.org/tracker/CVE-2023-27786 · Aviso do Fabricante