PT-2023-9851 · Tcpreplay+4 · Tcpreplay+4

Archanawind · Published 2023-03-01 · Updated 2025-02-26 · CVE-2023-27783

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions TCPreplay tcprewrite version 4.4.3

Description The issue allows a remote attacker to cause a denial of service via the tcpedit dlt cleanup function at plugins/dlt plugins.c. This is related to an uncontrolled reachable assertion in the tcpedit dlt cleanup() function of the tcprewrite PCAP file editor in the Tcpreplay PCAP file editing and replaying utility. Exploitation of the issue may allow a remote attacker to cause a denial of service.

Recommendations For TCPreplay tcprewrite version 4.4.3, consider disabling the tcpedit dlt cleanup() function as a temporary workaround until a patch is available.

Exploit

Fix

DoS

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

ALT-PU-2023-6893

BDU:2025-00906

CVE-2023-27783

MGASA-2023-0188

OPENSUSE-SU-2023:0267-1

OPENSUSE-SU-2024:13108-1

USN-7231-1

Affected Products

Alt Linux

Debian

Linuxmint

Tcpreplay

Ubuntu

References · 37

• 🔥 https://github.com/appneta/tcpreplay/issues/780 · Exploit
• https://github.com/appneta/tcpreplay/pull/781 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-27783 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2023:0267-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0188.html · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-27783 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-27787 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-27783 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-27783 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13108-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7231-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-27784 · Vendor Advisory