Broadcom Tcpreplay vulnerabilities, page 2
50 vulnerabilities
Known vulnerabilities in Broadcom Tcpreplay, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-24265broadcomtcpreplay+3
EPSS score2.23%
An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep crash and cause a denial of service.CVE-2020-12740broadcomtcpreplay+4EPSS score1.69%
tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a get_c operation. The issue is being triggered in the function get_ipv6_next() at common/get.c.CVE-2020-23273broadcomtcpreplay+2EPSS score0.66%
Heap-buffer overflow in the randomize_iparp function in edit_packet.c. of Tcpreplay v4.3.2 allows attackers to cause a denial of service (DOS) via a crafted pcap.CVE-2022-25484broadcomtcpreplay+1EPSS score0.61%
tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1.CVE-2022-37048broadcomtcpreplay+2EPSS score0.42%
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protocol at common/get.c:344. NOTE: this is different from CVE-2022-27941.CVE-2022-37047broadcomtcpreplay+2EPSS score0.42%
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at common/get.c:713. NOTE: this is different from CVE-2022-27940.CVE-2022-37049broadcomtcpreplay+2EPSS score0.42%
The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is different from CVE-2022-27942.CVE-2022-27941broadcomtcpreplay+2EPSS score1.11%
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c.CVE-2022-27939broadcomtcpreplay+2EPSS score1.03%
tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c.CVE-2022-27942broadcomtcpreplay+2EPSS score1.11%
tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.CVE-2022-27940broadcomtcpreplay+2EPSS score1.11%
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c.CVE-2022-27416broadcomtcpreplay+2EPSS score0.86%
Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free.CVE-2022-27418broadcomtcpreplay+2EPSS score0.86%
Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c.CVE-2022-28487broadcomtcpreplay+3EPSS score2.01%
Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.CVE-2017-14266broadcomtcpreplay+1EPSS score3.59%
tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160.CVE-2017-6429broadcomtcpreplay+1EPSS score2.50%
Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an over-size packet.CVE-2024-22654broadcomtcpreplay+2EPSS score0.42%
tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c.CVE-2024-3024appnetatcpreplay+3EPSS score0.44%
A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function get_layer4_v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-258333 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.CVE-2019-8377broadcomtcpreplay+3EPSS score1.33%
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.CVE-2019-8381broadcomtcpreplay+3EPSS score1.06%
An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.