CVE-2024-3024
appneta tcpreplay get.c get_layer4_v6 heap-based overflow
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function get_layer4_v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-258333 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Se encontró una vulnerabilidad en appneta tcpreplay hasta 4.4.4. Ha sido clasificado como problemático. Esto afecta a la función get_layer4_v6 del archivo /tcpreplay/src/common/get.c. La manipulación conduce a un desbordamiento del búfer basado en el montón. Atacar localmente es un requisito. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-258333. NOTA: Se contactó primeramente con el proveedor sobre esta divulgación, pero no respondió de ninguna manera.
Es wurde eine Schwachstelle in appneta tcpreplay bis 4.4.4 ausgemacht. Sie wurde als problematisch eingestuft. Dabei betrifft es die Funktion get_layer4_v6 der Datei /tcpreplay/src/common/get.c. Durch das Beeinflussen mit unbekannten Daten kann eine heap-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff muss lokal erfolgen. Der Exploit steht zur öffentlichen Verfügung.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2024-03-27 CVE Reserved
- 2024-03-28 CVE Published
- 2024-03-28 EPSS Updated
- 2024-08-01 CVE Updated
- 2024-08-01 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-122: Heap-based Buffer Overflow
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| https://docs.google.com/document/d/1wCIrViAJwGsO5afPBLLjRhO5RClsoUo3J9q1psLs84s/edit?usp=sharing | Related | |
| https://vuldb.com/?submit.297866 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://drive.google.com/file/d/1zV9MSkfYLIrdtK3yczy1qbsJr_yN2fwH/view | 2024-08-01 | |
| https://vuldb.com/?id.258333 | 2024-08-01 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Appneta Search vendor "Appneta" | Tcpreplay Search vendor "Appneta" for product "Tcpreplay" | 4.4.0 Search vendor "Appneta" for product "Tcpreplay" and version "4.4.0" | en |
Affected
| ||||||
| Appneta Search vendor "Appneta" | Tcpreplay Search vendor "Appneta" for product "Tcpreplay" | 4.4.1 Search vendor "Appneta" for product "Tcpreplay" and version "4.4.1" | en |
Affected
| ||||||
| Appneta Search vendor "Appneta" | Tcpreplay Search vendor "Appneta" for product "Tcpreplay" | 4.4.2 Search vendor "Appneta" for product "Tcpreplay" and version "4.4.2" | en |
Affected
| ||||||
| Appneta Search vendor "Appneta" | Tcpreplay Search vendor "Appneta" for product "Tcpreplay" | 4.4.3 Search vendor "Appneta" for product "Tcpreplay" and version "4.4.3" | en |
Affected
| ||||||
| Appneta Search vendor "Appneta" | Tcpreplay Search vendor "Appneta" for product "Tcpreplay" | 4.4.4 Search vendor "Appneta" for product "Tcpreplay" and version "4.4.4" | en |
Affected
| ||||||