
CVE-2022-27942 – Gentoo Linux Security Advisory 202210-08
https://notcve.org/view.php?id=CVE-2022-27942
26 Mar 2022 — tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c. tcpprep en Tcpreplay versión 4.4.1 presenta una lectura excesiva de búfer en la región heap de la memoria en la función parse_mpls en el archivo common/get.c Multiple vulnerabilities have been discovered in Tcpreplay, the worst of which could result in denial of service. Versions less than 4.4.2 are affected. • https://github.com/appneta/tcpreplay/issues/719 • CWE-125: Out-of-bounds Read •

CVE-2022-25484
https://notcve.org/view.php?id=CVE-2022-25484
22 Mar 2022 — tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1. tcpprep versión v4.4.1, presenta una aserción alcanzable (assert(l2len ) 0)) en la función packet2tree() en el archivo tree.c en tcpprep v4.4.1 • https://github.com/appneta/tcpreplay/issues/715 • CWE-617: Reachable Assertion •