PT-2017-17059

CVE-2017-6429

Published

2017-03-15

Updated

2024-06-15

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tcpreplay versions prior to 4.2.0 Beta 1

Description The issue is related to a buffer overflow in the tcpcapinfo utility. This allows remote attackers to have an unspecified impact via a pcap file with an over-size packet.

Recommendations For versions prior to 4.2.0 Beta 1, update to version 4.2.0 Beta 1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the tcpcapinfo utility with untrusted pcap files until a patch is applied.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers

CVE-2017-6429

ALT-PU-2017-2393