PT-2023-9851 · Tcpreplay+4 · Tcpreplay+4

Archanawind · Publicado 2023-03-01 · Atualizado 2025-02-26 · CVE-2023-27783

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions TCPreplay tcprewrite version 4.4.3

Description The issue allows a remote attacker to cause a denial of service via the tcpedit dlt cleanup function at plugins/dlt plugins.c. This is related to an uncontrolled reachable assertion in the tcpedit dlt cleanup() function of the tcprewrite PCAP file editor in the Tcpreplay PCAP file editing and replaying utility. Exploitation of the issue may allow a remote attacker to cause a denial of service.

Recommendations For TCPreplay tcprewrite version 4.4.3, consider disabling the tcpedit dlt cleanup() function as a temporary workaround until a patch is available.

Exploit

Correção

DoS

Assertion Failure

Enumeração de Fraquezas

CWE-617

Identificadores relacionados

ALT-PU-2023-6893

BDU:2025-00906

CVE-2023-27783

MGASA-2023-0188

OPENSUSE-SU-2023:0267-1

OPENSUSE-SU-2024:13108-1

USN-7231-1

Produtos afetados

Alt Linux

Debian

Linuxmint

Tcpreplay

Ubuntu

Referências · 37

• 🔥 https://github.com/appneta/tcpreplay/issues/780 · Exploit
• https://github.com/appneta/tcpreplay/pull/781 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2023-27783 · Nota de Segurança
• https://osv.dev/vulnerability/openSUSE-SU-2023:0267-1 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2023-0188.html · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-27783 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=31926 · Nota
• https://ubuntu.com/security/CVE-2023-27787 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-27783 · Nota
• https://t.me/cvenotify/112554 · Publicação no Telegram
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-27783 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5 · Aviso do Fabricante
• https://lists.opensuse.org/archives/list/[e-mail]/thread/WHVN36IVFXJ2224ASIQPWW2NGLN7SXGF · Nota