PT-2025-33451 · Tcpprep+3 · Tcpprep+3

Nipc-Cxd · Publicado 2025-08-15 · Atualizado 2025-09-17 · CVE-2025-9019

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: tcpreplay version 4.5.1

Description: A heap-based buffer overflow exists in the mask cidr6 function within the cidr.c file of the tcpprep component. The issue can be triggered remotely and is considered to have high attack complexity, making exploitation difficult. The exploit has been publicly disclosed.

Recommendations: Update to version 4.5.2 or later.

Exploit

Correção

Memory Corruption

Buffer Overflow

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-119

CWE-122

Identificadores relacionados

ALT-PU-2025-11729

ALT-PU-2025-11773

CVE-2025-9019

Produtos afetados

Alt Linux

Debian

Tcpprep

Tcpreplay

Referências · 29

• 🔥 https://github.com/appneta/tcpreplay/issues/959 · Exploit
• 🔥 https://github.com/appneta/tcpreplay/issues/958 · Exploit
• 🔥 https://vuldb.com/?submit.623635 · Exploit
• 🔥 https://vuldb.com/?submit.623638 · Exploit
• 🔥 https://drive.google.com/file/d/13SQYVIb_YQoRfaJaaLf6iLtMiCRCHlBc/view?usp=sharing · Exploit
• 🔥 https://vuldb.com/?submit.623637 · Exploit
• 🔥 https://vuldb.com/?submit.623636 · Exploit
• 🔥 https://vuldb.com/?submit.623639 · Exploit
• https://github.com/appneta/tcpreplay/issues/958#issuecomment-3124876035 · Aviso do Fabricante
• https://t.me/cveNotify/132426 · Publicação no Telegram
• https://t.me/cveNotify/132403 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1956289024584507890 · Publicação no Twitter
• https://vuldb.com/?id.320080 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-9019 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9019 · Nota de Segurança