PT-2023-9852 · Tcpreplay+4 · Tcpreplay+4

Marsman1996 · Published 2023-03-01 · Updated 2025-01-28 · CVE-2023-27789

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Tcpreplay version 4.4.3

Description The issue is related to the cidr2cidr() function in the Tcpreplay utility, which can cause a denial of service when exploited by a remote attacker. This function is part of the PCAP file handler and is associated with an uncontrolled reachable assertion. The exploitation of this issue can allow a remote attacker to cause a denial of service.

Recommendations For version 4.4.3, consider disabling the cidr2cidr() function as a temporary workaround until a patch is available. Restrict access to the cidr.c file to minimize the risk of exploitation. Avoid using the cidr2cidr() function in the affected endpoint until the issue is resolved.

Exploit

Fix

DoS

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

ALT-PU-2023-6893

BDU:2025-00907

CVE-2023-27789

MGASA-2023-0188

USN-7231-1

Affected Products

Alt Linux

Debian

Linuxmint

Tcpreplay

Ubuntu

References · 28

• 🔥 https://github.com/appneta/tcpreplay/issues/784 · Exploit
• https://github.com/appneta/tcpreplay/pull/783 · Patch
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-27789 · Security Note
• https://osv.dev/vulnerability/MGASA-2023-0188 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-27789 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-27789 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-27789 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0188.html · Security Note
• https://ubuntu.com/security/CVE-2023-27789 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-27787 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-27783 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00907 · Security Note