PT-2023-2339 · Tcpreplay+5 · Tcpreplay+5

Archanawind · Published 2023-03-16 · Updated 2025-01-28 · CVE-2023-27786

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions TCPprep version 4.4.3

Description The issue allows a remote attacker to cause a denial of service via the macinstring function. This is related to pointer dereference errors in the Tcpreplay utility for editing and replaying PCAP files.

Recommendations For TCPprep version 4.4.3, consider disabling the macinstring function as a temporary workaround until a patch is available.

Exploit

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2023-6893

BDU:2023-02104

CVE-2023-27786

MGASA-2023-0188

OPENSUSE-SU-2023:0267-1

OPENSUSE-SU-2024:13108-1

USN-7231-1

Affected Products

Alt Linux

Debian

Linuxmint

Tcpprep

Tcpreplay

Ubuntu

References · 36

• 🔥 https://github.com/appneta/tcpreplay/issues/782 · Exploit
• https://github.com/appneta/tcpreplay/pull/783 · Patch
• https://bdu.fstec.ru/vul/2023-02104 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2023:0267-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0188.html · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-27787 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-27783 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-27786 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-27786 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13108-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7231-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-27784 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-27786 · Vendor Advisory