CVE-2019-8376
HIGHTcpreplay 4.3.1 - Denial of Service via Crafted PCAP File in get_layer4_v6
Title source: llmDescription
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
References (6)
Core 6
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/appneta/tcpreplay/issues/537
Exploit, Third Party Advisory x_refsource_misc
https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-function-get_layer4_v6-tcpreplay-4-3-1/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/107085
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MLPY6W7Z7G6PF2JN4LXXHCACYLD4RBG6/
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4V3SADKXUSHWTVAPU3WLXBDEQUHRA6ZO/
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EB3ASS7URTIA3IFSBL2DIWJAFKTBJCAW/
Scores
CVSS v3
7.8
EPSS
0.0024
EPSS Percentile
46.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-476
Status
published
Products (4)
broadcom/tcpreplay
4.3.1
fedoraproject/fedora
28
fedoraproject/fedora
29
fedoraproject/fedora
30
Published
Feb 17, 2019
Tracked Since
Feb 18, 2026