
CVE-2022-37049 – Gentoo Linux Security Advisory 202210-08
https://notcve.org/view.php?id=CVE-2022-37049
18 Aug 2022 — The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is different from CVE-2022-27942. Se ha detectado que el componente tcpprep de Tcpreplay versión v4.4.1, contiene un desbordamiento de búfer en la región heap de la memoria en la función parse_mpls en el archivo common/get.c:150. NOTA: esto es diferente de CVE-2022-27942. Multiple vulnerabilities have been discovered in Tcpreplay, the worst of which could result in d... • https://github.com/appneta/tcpreplay/issues/736 • CWE-787: Out-of-bounds Write •

CVE-2022-28487 – Gentoo Linux Security Advisory 202210-08
https://notcve.org/view.php?id=CVE-2022-28487
04 May 2022 — Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality. Tcpreplay versión 4.4.1, contiene un fallo de pérdida de memoria en la función fix_ipv6_checksums(). La mayor amenaza de esta vulnerabilidad es para la confidencialidad de los datos Multiple vulnerabilities have been discovered in Tcpreplay, the worst of which could result in denial of service. Versions less than 4.4.2 are affected. • https://github.com/appneta/tcpreplay/issues/723 • CWE-401: Missing Release of Memory after Effective Lifetime •

CVE-2022-27416 – Gentoo Linux Security Advisory 202210-08
https://notcve.org/view.php?id=CVE-2022-27416
12 Apr 2022 — Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free. Se ha detectado que Tcpreplay versión v4.4.1, contiene una doble liberación por medio de __interceptor_free Multiple vulnerabilities have been discovered in Tcpreplay, the worst of which could result in denial of service. Versions less than 4.4.2 are affected. • https://github.com/appneta/tcpreplay/issues/702 • CWE-415: Double Free •

CVE-2022-27418 – Gentoo Linux Security Advisory 202210-08
https://notcve.org/view.php?id=CVE-2022-27418
12 Apr 2022 — Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c. Tcpreplay versión v4.4.1, presenta un desbordamiento de búfer en la región heap de la memoria en la función do_checksum_math en el archivo /tcpedit/checksum.c Multiple vulnerabilities have been discovered in Tcpreplay, the worst of which could result in denial of service. Versions less than 4.4.2 are affected. • https://github.com/appneta/tcpreplay/issues/703 • CWE-787: Out-of-bounds Write •

CVE-2022-27939 – Gentoo Linux Security Advisory 202210-08
https://notcve.org/view.php?id=CVE-2022-27939
26 Mar 2022 — tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c. tcprewrite en Tcpreplay versión 4.4.1, presenta una aserción alcanzable en la función get_layer4_v6 en el archivo common/get.c Multiple vulnerabilities have been discovered in Tcpreplay, the worst of which could result in denial of service. Versions less than 4.4.2 are affected. • https://github.com/appneta/tcpreplay/issues/717 • CWE-617: Reachable Assertion •

CVE-2022-27940 – Gentoo Linux Security Advisory 202210-08
https://notcve.org/view.php?id=CVE-2022-27940
26 Mar 2022 — tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c. tcprewrite en Tcpreplay versión 4.4.1, presenta una lectura excesiva de búfer en la región heap de la memoria en la función get_ipv6_next en el archivo common/get.c Multiple vulnerabilities have been discovered in Tcpreplay, the worst of which could result in denial of service. Versions less than 4.4.2 are affected. • https://github.com/appneta/tcpreplay/issues/718 • CWE-125: Out-of-bounds Read •

CVE-2022-27941 – Gentoo Linux Security Advisory 202210-08
https://notcve.org/view.php?id=CVE-2022-27941
26 Mar 2022 — tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c. tcprewrite en Tcpreplay versión 4.4.1 presenta una lectura excesiva de búfer en la región heap de la memoria en la función get_l2len_protocol en el archivo common/get.c Multiple vulnerabilities have been discovered in Tcpreplay, the worst of which could result in denial of service. Versions less than 4.4.2 are affected. • https://github.com/appneta/tcpreplay/issues/716 • CWE-125: Out-of-bounds Read •

CVE-2022-27942 – Gentoo Linux Security Advisory 202210-08
https://notcve.org/view.php?id=CVE-2022-27942
26 Mar 2022 — tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c. tcpprep en Tcpreplay versión 4.4.1 presenta una lectura excesiva de búfer en la región heap de la memoria en la función parse_mpls en el archivo common/get.c Multiple vulnerabilities have been discovered in Tcpreplay, the worst of which could result in denial of service. Versions less than 4.4.2 are affected. • https://github.com/appneta/tcpreplay/issues/719 • CWE-125: Out-of-bounds Read •

CVE-2022-25484
https://notcve.org/view.php?id=CVE-2022-25484
22 Mar 2022 — tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1. tcpprep versión v4.4.1, presenta una aserción alcanzable (assert(l2len ) 0)) en la función packet2tree() en el archivo tree.c en tcpprep v4.4.1 • https://github.com/appneta/tcpreplay/issues/715 • CWE-617: Reachable Assertion •

CVE-2021-45386 – Gentoo Linux Security Advisory 202210-08
https://notcve.org/view.php?id=CVE-2021-45386
11 Feb 2022 — tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c tcpreplay versión 4.3.4, presenta una Aserción Alcanzable en la función add_tree_ipv6() en el archivo tree.c Multiple vulnerabilities have been discovered in Tcpreplay, the worst of which could result in denial of service. Versions less than 4.4.2 are affected. • https://github.com/appneta/tcpreplay/issues/687 • CWE-617: Reachable Assertion •