CVE-2020-12740
https://notcve.org/view.php?id=CVE-2020-12740
tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a get_c operation. The issue is being triggered in the function get_ipv6_next() at common/get.c. El componente tcprewrite en Tcpreplay versiones hasta 4.3.2, presenta una lectura excesiva del búfer en la región heap de la memoria durante una operación get_c. El problema ha sido activado en la función get_ipv6_next() en el archivo common/get.c. • https://github.com/appneta/tcpreplay/issues/576 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4YAT4AGTHQKB74ETOQPJMV67TSDIAPOC https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UOSEIQ3D2OONCJEVMGC2TYBC2QX4E5EJ • CWE-125: Out-of-bounds Read •
CVE-2018-20553
https://notcve.org/view.php?id=CVE-2018-20553
Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c. Tcpreplay, en versiones anteriores a la 4.3.1, tiene una sobrelectura de búfer basada en memoria dinámica (heap) en get_l2len en common/get.c. • https://github.com/appneta/tcpreplay/issues/530 https://github.com/appneta/tcpreplay/pull/532/commits/6b830a1640ca20528032c89a4fdd8291a4d2d8b2 • CWE-125: Out-of-bounds Read •
CVE-2018-20552
https://notcve.org/view.php?id=CVE-2018-20552
Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c. Tcpreplay, en versiones anteriores a la 4.3.1, tiene una sobrelectura de búfer basada en memoria dinámica (heap) en packet2tree en tree.c. • https://github.com/appneta/tcpreplay/issues/530 https://github.com/appneta/tcpreplay/pull/532/commits/6b830a1640ca20528032c89a4fdd8291a4d2d8b2 • CWE-125: Out-of-bounds Read •
CVE-2017-14266 – tcprewrite - Heap Buffer Overflow
https://notcve.org/view.php?id=CVE-2017-14266
tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160. tcprewrite en Tcpreplay 3.4.4 tiene una vulnerabilidad de desbordamiento de búfer basado en memoria dinámica (heap), desencadenada por un archivo PCAP manipulado. Esta vulnerabilidad está relacionada con CVE-2016-6160. tcprewrite version 3.4.4 suffers from a heap-based buffer overflow vulnerability. • https://www.exploit-db.com/exploits/42652 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2017-6429
https://notcve.org/view.php?id=CVE-2017-6429
Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an over-size packet. Desbordamiento de búfer en la utilidad tcpcapinfo en Tcpreplay en versiones anteriores a 4.2.0 Beta 1 permite a atacantes remotos tener impacto no especificado a través de un archivo pcap con un paquete de gran tamaño. • http://www.securityfocus.com/archive/1/540221/100/0/threaded http://www.securityfocus.com/bid/96579 https://github.com/appneta/tcpreplay/commit/d689d14dbcd768c028eab2fb378d849e543dcfe9 https://github.com/appneta/tcpreplay/issues/278 https://github.com/appneta/tcpreplay/releases/tag/v4.2.0-beta1 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •