Multiple vulnerabilities in AppNeta Tcpreplay
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 3 |
| CVE-ID | CVE-2019-8376 CVE-2019-8377 CVE-2019-8381 |
| CWE-ID | CWE-476 CWE-20 |
| Exploitation vector | Network |
| Public exploit |
Public exploit code for vulnerability #1 is available. Public exploit code for vulnerability #2 is available. Public exploit code for vulnerability #3 is available. |
| Vulnerable software Subscribe |
Tcpreplay Client/Desktop applications / Other client software |
| Vendor | AppNeta |
Security Bulletin
This security bulletin contains information about 3 vulnerabilities.
1) NULL pointer dereference
EUVDB-ID: #VU17825
Risk: Low
CVSSv3.1: 6.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2019-8376
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference condition in the get_layer4_v6() function, as defined in the get.c source code file. A remote attacker can send a specially crafted packet capture (pcap) file to the tcpreplay-edit binary, trigger a segmentation fault and cause a DoS condition.
MitigationInstall update from vendor's website.
Vulnerable software versionsTcpreplay: 3.4.2 - 4.3.1
External linkshttp://github.com/appneta/tcpreplay/issues/537
http://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-function-get_layer4_v6-tcpreplay-4-3-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
2) NULL pointer dereference
EUVDB-ID: #VU17826
Risk: Low
CVSSv3.1: 6.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2019-8377
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference condition that exists in the get_ipv6_l4proto()function, as defined in the get.c source code file. A remote attacker can send a specially crafted packet capture (pcap) file to the tcpreplay-edit binary, trigger a segmentation fault and cause a DoS condition.
MitigationInstall update from vendor's website.
Vulnerable software versionsTcpreplay: 3.4.2 - 4.3.1
External linkshttp://github.com/appneta/tcpreplay/issues/536
http://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-function-get_ipv6_l4proto-tcpreplay-4-3-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
3) Segmentation fault
EUVDB-ID: #VU17827
Risk: Low
CVSSv3.1: 6.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2019-8381
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to an invalid memory access condition that exists in the do_checksumfunction, as defined in the checksum.c source code file. A remote attacker can send a specially crafted packet capture (pcap) file to the tcpreplay-edit binary, trigger a segmentation fault and cause a DoS condition.
MitigationInstall update from vendor's website.
Vulnerable software versionsTcpreplay: 3.4.2 - 4.3.1
External linkshttp://github.com/appneta/tcpreplay/issues/538
http://research.loginsoft.com/bugs/invalid-memory-access-vulnerability-in-function-do_checksum-tcpreplay-4-3-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
