CVE-2023-27784

Name of the Vulnerable Software and Affected Versions TCPReplay version 4.4.3

Description The issue allows a remote attacker to cause a denial of service via the read hexstring function. This is related to a pointer dereference issue in the tcprewrite editor of PCAP files in the Tcpreplay utility. The exploitation of this issue can allow a remote attacker to cause a denial of service.

Recommendations For TCPReplay version 4.4.3, as a temporary workaround, consider disabling the read hexstring function until a patch is available. Restrict access to the utils.c file, specifically the endpoint at line 309, to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.