| タイトル | appneta tcpreplay 4.4.4 (latest) double-free |
|---|
| 説明 | A double-free vulnerability exists within the tcprewrite utility of the tcpreplay suite. When handling specific packet capture files, tcprewrite may attempt to free the same memory location twice leading to potential code execution, denial of service, or memory corruption scenarios.
The issue occurs in the tcpedit_dlt_cleanup function, as part of the dlt_plugins.c code, and can be triggered under certain conditions, as evidenced by the provided crash file and stack trace pointing to a problem when cleaning up resources.
|
|---|
| ソース | ⚠️ https://github.com/appneta/tcpreplay/issues/850 |
|---|
| ユーザー | MSXF (UID 62382) |
|---|
| 送信 | 2024年03月10日 09:11 (3 年 ago) |
|---|
| モデレーション | 2024年03月19日 10:01 (9 days later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 248422 [tcpreplay TCPrewrite 4.4.3/4.4.4 plugins/dlt_plugins.c tcpedit_dlt_cleanup メモリ破損] |
|---|
| ポイント | 0 |
|---|