PT-2025-33451 · Tcpprep+3 · Tcpprep+3

Nipc-Cxd · Published 2025-08-15 · Updated 2025-09-17 · CVE-2025-9019

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: tcpreplay version 4.5.1

Description: A heap-based buffer overflow exists in the mask cidr6 function within the cidr.c file of the tcpprep component. The issue can be triggered remotely and is considered to have high attack complexity, making exploitation difficult. The exploit has been publicly disclosed.

Recommendations: Update to version 4.5.2 or later.

Exploit

Fix

Memory Corruption

Buffer Overflow

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

CWE-122

Related Identifiers

ALT-PU-2025-11729

ALT-PU-2025-11773

CVE-2025-9019

Affected Products

Alt Linux

Debian

Tcpprep

Tcpreplay

References · 29

• 🔥 https://github.com/appneta/tcpreplay/issues/959 · Exploit
• 🔥 https://github.com/appneta/tcpreplay/issues/958 · Exploit
• 🔥 https://vuldb.com/?submit.623635 · Exploit
• 🔥 https://vuldb.com/?submit.623638 · Exploit
• 🔥 https://drive.google.com/file/d/13SQYVIb_YQoRfaJaaLf6iLtMiCRCHlBc/view?usp=sharing · Exploit
• 🔥 https://vuldb.com/?submit.623637 · Exploit
• 🔥 https://vuldb.com/?submit.623636 · Exploit
• 🔥 https://vuldb.com/?submit.623639 · Exploit
• https://github.com/appneta/tcpreplay/issues/958#issuecomment-3124876035 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9019 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9019 · Security Note
• https://osv.dev/vulnerability/CVE-2025-9019 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-9019 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-9019 · Security Note
• https://ubuntu.com/security/CVE-2025-9019 · Vendor Advisory