PT-2018-14067 · Acutect+2 · Tcpreplay+2

Published 2018-09-28 · Updated 2024-06-15 · CVE-2018-17580

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tcpreplay version 4.3.0 beta1

Description A heap-based buffer over-read exists in the fast edit packet() function, located in the send packets.c file. This issue can lead to Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a crafted pcap file.

Recommendations For Tcpreplay version 4.3.0 beta1, consider avoiding the use of crafted pcap files until a patch is available. As a temporary workaround, restrict the processing of pcap files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2018-17580

MGASA-2019-0094

OPENSUSE-SU-2024:11426-1

USN-5205-1

Affected Products

Linuxmint

Tcpreplay

Ubuntu

References · 40

• 🔥 https://github.com/appneta/tcpreplay/issues/485 · Exploit
• 🔥 https://github.com/SegfaultMasters/covering360/blob/master/tcpreplay · Exploit
• https://ubuntu.com/security/CVE-2020-24265 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-17974 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5205-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11426-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-18408 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-12740 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-17580 · Security Note
• https://ubuntu.com/security/CVE-2020-24266 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-17582 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-17580 · Security Note
• https://ubuntu.com/security/CVE-2018-20553 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13112 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-17580 · Vendor Advisory