PT-2019-18996 · Astron Security+1 · Tcpreplay+1

Mastersop · Published 2019-02-17 · Updated 2024-06-15 · CVE-2019-8377

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tcpreplay version 4.3.1

Description An issue was discovered in the function get ipv6 l4proto() located at get.c, which can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. This can cause a NULL pointer dereference, allowing an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Recommendations For Tcpreplay version 4.3.1, consider avoiding the use of crafted pcap files with the tcpreplay-edit binary until a patch is available. As a temporary workaround, restrict access to the get ipv6 l4proto() function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2019-1448

CVE-2019-8377

MGASA-2019-0158

OPENSUSE-SU-2024:11426-1

Affected Products

Alt Linux

Tcpreplay

References · 32

• 🔥 https://github.com/appneta/tcpreplay/issues/536 · Exploit
• 🔥 https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-function-get_ipv6_l4proto-tcpreplay-4-3-1 · Exploit
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UOSEIQ3D2OONCJEVMGC2TYBC2QX4E5EJ · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-8377 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4V3SADKXUSHWTVAPU3WLXBDEQUHRA6ZO · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-8377 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2019-0158 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-8377 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-8377 · Security Note
• https://advisories.mageia.org/MGASA-2019-0158.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2019-8377 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-8377 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11426-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EB3ASS7URTIA3IFSBL2DIWJAFKTBJCAW · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4YAT4AGTHQKB74ETOQPJMV67TSDIAPOC · Vendor Advisory