CVE-2020-18976

Name of the Vulnerable Software and Affected Versions Tcpreplay version 4.3.2

Description The issue is related to a buffer overflow in the do checksum function of the checksum.c component in the Tcpreplay utility. This can be exploited by a remote attacker using a specially crafted pcap file, leading to a denial of service. The exploitation occurs when the tcpreplay-edit binary processes the malicious pcap file.

Recommendations For Tcpreplay version 4.3.2, consider disabling the do checksum function as a temporary workaround until a patch is available. Restrict access to the tcpreplay-edit binary to minimize the risk of exploitation. Avoid using the tcpreplay-edit binary with untrusted pcap files until the issue is resolved.