PT-2025-23165 · Tcpreplay+1 · Tcpreplay+1

Published 2025-05-29 · Updated 2025-11-27 · CVE-2024-22654

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions tcpreplay version 4.4.4

Description The issue is related to an infinite loop in the tcprewrite function, located at get.c. This infinite loop can be triggered, potentially causing the software to become unresponsive.

Recommendations For tcpreplay version 4.4.4, consider disabling the tcprewrite function as a temporary workaround until a patch is available. Restrict access to the get.c file to minimize the risk of exploitation. Avoid using the tcprewrite function until the issue is resolved.

Exploit

Fix

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CVE-2024-22654

OPENSUSE-SU-2025:20119-1

Affected Products

Debian

Tcpreplay

References · 36

• 🔥 https://github.com/appneta/tcpreplay/issues/827 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-22654 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-22654 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:20119-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-22654 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22654 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-22654 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-22654 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-22654 · Vendor Advisory
• https://github.com/appneta/tcpreplay/pull/842 · Note
• https://github.com/appneta/tcpreplay/pull/859 · Note
• https://bugzilla.suse.com/1248597 · Note
• https://suse.com/security/cve/CVE-2025-8746 · Note
• https://bugzilla.suse.com/1218249 · Note
• https://twitter.com/CVEnew/status/1928092932973699180 · Twitter Post