Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This flaw enables a local attacker to initiate a Denial of Service (DoS) attack.
2023-12-21T16:15:10.400
2024-11-21T08:34:44.407
Modified
CVSSv3.1: 5.5 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | broadcom | tcpreplay | 4.4.3 | Yes |
| Application | broadcom | tcpreplay | 4.4.4 | Yes |
| Application | fedoraproject | extra_packages_for_enterprise_linux | 8.0 | Yes |
| Operating System | fedoraproject | fedora | 39 | Yes |