| शीर्षक | appneta tcpreplay 4.4.4 (latest) heap-buffer-overflow |
|---|
| विवरण | An issue was discovered in tcpreplay, a tool for replaying captured network traffic. A heap-buffer-overflow vulnerability exists in the get_layer4_v6 function, as defined in get.c. This function is responsible for parsing the IPv6 headers to identify the layer 4 protocol header. When handling specially crafted IPv6 packets, the function may erroneously read beyond the allocated heap memory, leading to potential security implications such as denial of service (DoS) or information disclosure. The overflow occurs when the parser misjudges the boundaries of the header structures in IPv6 packets.
|
|---|
| स्रोत | ⚠️ https://docs.google.com/document/d/1wCIrViAJwGsO5afPBLLjRhO5RClsoUo3J9q1psLs84s/edit?usp=sharing |
|---|
| उपयोगकर्ता | MSXF (UID 62382) |
|---|
| सबमिशन | 13/03/2024 04:02 PM (3 साल पहले) |
|---|
| संयम | 27/03/2024 07:25 PM (14 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 258333 [appneta tcpreplay तक 4.4.4 get.c get_layer4_v6 बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|