CVE-2024-3024

Name of the Vulnerable Software and Affected Versions appneta tcpreplay versions up to 4.4.4

Description A vulnerability was found in appneta tcpreplay, affecting the function get layer4 v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Recommendations As a temporary workaround, consider disabling the get layer4 v6 function until a patch is available. Restrict access to the /tcpreplay/src/common/get.c file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.