Description
A flaw has been found in appneta tcpreplay up to 4.5.1. The affected element is the function fix_ipv6_checksums of the file edit_packet.c of the component tcprewrite. This manipulation causes use after free. The attack is restricted to local execution. The exploit has been published and may be used. Upgrading to version 4.5.2-beta3 is sufficient to fix this issue. It is advisable to upgrade the affected component.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
appneta tcpreplay
4.5.0affected4.5.1affected4.5.2-beta3unaffected
References
- https://vuldb.com/?id.321218 ↗
- https://vuldb.com/?ctiid.321218 ↗
- https://vuldb.com/?submit.630497 ↗
- https://github.com/appneta/tcpreplay/issues/972 ↗
- https://github.com/appneta/tcpreplay/issues/972#issuecomment-3199019278 ↗
- https://drive.google.com/file/d/1BQZF558bRHv07wtlCoZgtqTlEpHgfytp/view?usp=sharing ↗