MGASA-2020-0437

Source
https://advisories.mageia.org/MGASA-2020-0437.html
Import Source
https://advisories.mageia.org/MGASA-2020-0437.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2020-0437
Related
Published
2020-11-23T19:51:37Z
Modified
2020-11-23T19:13:42Z
Summary
Updated tcpreplay package fixes security vulnerabilities
Details

An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep crash and cause a denial of service (CVE-2020-24265).

An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that can make tcpprep crash and cause a denial of service (CVE-2020-24266).

References
Credits

Affected packages