CVE-2021-41043 – tcpslice: use-after-free in extract_slice()

https://notcve.org/view.php?id=CVE-2021-41043

Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact. Un uso de memoria previamente liberada en tcpslice desencadena AddressSanitizer, ningún otro impacto confirmado. A heap use-after-free flaw was found in tcpslices' extract_slice(). This flaw allows an attacker with local network access to pass a specially crafted 'pcap' file to tcpslice, causing segmentation fault. This vulnerability halts or crashes the application, leading to a denial of service. • https://github.com/the-tcpdump-group/tcpslice/issues/11 https://access.redhat.com/security/cve/CVE-2021-41043 https://bugzilla.redhat.com/show_bug.cgi?id=2040392 • CWE-416: Use After Free •