CVE-2025-9384: appneta tcpreplay Improper Resource Shutdown or Release

Vulnerability summary

CVE-2025-9384 is a medium (CVSS 5.5) Improper Resource Shutdown or Release vulnerability in appneta tcpreplay. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 24-08-2025
   PublishedVulnerability first disclosed.
2. 25-08-2025
   Last modifiedVulnerability information updated.

Description

A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpedit_post_args of the file /src/tcpedit/parse_args.c. The manipulation results in null pointer dereference. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 4.5.2-beta2 is recommended to address this issue. Upgrading the affected component is advised. The vendor explains, that he was "[a]ble to reproduce in 6fcbf03 but not in 4.5.2-beta2".

• CWE-404Improper Resource Shutdown or ReleaseThe product does not release or incorrectly releases a resource before it is made available for re-use.
• CWE-476NULL Pointer DereferenceThe product dereferences a pointer that it expects to be valid but is NULL.