| Título | appneta tcpreplay 4.4.4 (latest) double-free |
|---|
| Descripción | A double-free vulnerability exists within the tcprewrite utility of the tcpreplay suite. When handling specific packet capture files, tcprewrite may attempt to free the same memory location twice leading to potential code execution, denial of service, or memory corruption scenarios.
The issue occurs in the tcpedit_dlt_cleanup function, as part of the dlt_plugins.c code, and can be triggered under certain conditions, as evidenced by the provided crash file and stack trace pointing to a problem when cleaning up resources.
|
|---|
| Fuente | ⚠️ https://github.com/appneta/tcpreplay/issues/850 |
|---|
| Usuario | MSXF (UID 62382) |
|---|
| Sumisión | 2024-03-10 09:11 (hace 3 años) |
|---|
| Moderación | 2024-03-19 10:01 (9 days later) |
|---|
| Estado | Duplicado |
|---|
| Entrada de VulDB | 248422 [tcpreplay TCPrewrite 4.4.3/4.4.4 plugins/dlt_plugins.c tcpedit_dlt_cleanup desbordamiento de búfer] |
|---|
| Puntos | 0 |
|---|