MGASA-2024-0098

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2024-0098.html
Import Source
https://advisories.mageia.org/MGASA-2024-0098.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2024-0098
Related
Published
2024-03-28T03:52:55Z
Modified
2024-03-28T03:39:59Z
Summary
Updated tcpreplay packages fix security vulnerabilities
Details

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpeditdltcleanup() function within plugins/dltplugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This flaw enables a local attacker to initiate a Denial of Service (DoS) attack. (CVE-2023-4256) Null Pointer Dereference in maskcidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to crash the application via crafted tcprewrite command. (CVE-2023-43279)

References
Credits

Affected packages

Mageia:9 / tcpreplay

Package

Name
tcpreplay
Purl
pkg:rpm/mageia/tcpreplay?distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.3-2.1.mga9

Ecosystem specific 

{
    "section": "core"
}