CVE-2023-27789

Name of the Vulnerable Software and Affected Versions Tcpreplay version 4.4.3

Description The issue is related to the cidr2cidr() function in the Tcpreplay utility, which can cause a denial of service when exploited by a remote attacker. This function is part of the PCAP file handler and is associated with an uncontrolled reachable assertion. The exploitation of this issue can allow a remote attacker to cause a denial of service.

Recommendations For version 4.4.3, consider disabling the cidr2cidr() function as a temporary workaround until a patch is available. Restrict access to the cidr.c file to minimize the risk of exploitation. Avoid using the cidr2cidr() function in the affected endpoint until the issue is resolved.