CVE-2025-9386

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-9386
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-9386.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-9386
Downstream
Related
Published
2025-08-24T11:15:34.590Z
Modified
2026-04-09T11:06:10.138125Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function getl2lenprotocol of the file get.c of the component tcprewrite. Such manipulation leads to use after free. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Upgrading to version 4.5.2-beta3 is sufficient to resolve this issue. You should upgrade the affected component.

References

Affected packages

Git / github.com/appneta/tcpreplay

Affected ranges

Type
GIT
Repo
https://github.com/appneta/tcpreplay
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0ba7d17fcb9ddedf61168f99c249b30731310d4e
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.5.1"
        }
    ]
}

Affected versions

v3.*
v3.4.2
v3.4.3
v3.4.4
v4.*
v4.0.0
v4.0.0beta1
v4.0.0beta2
v4.0.1
v4.0.2
v4.0.3
v4.0.4
v4.0.5
v4.0.5beta1
v4.0.5beta2
v4.0.5beta3
v4.1.0
v4.1.0beta1
v4.1.0beta2
v4.1.1
v4.1.1-beta2
v4.1.1-beta3
v4.1.2
v4.2.6
v4.4.3
v4.5.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-9386.json"