Submit #296044: appneta tcpreplay 4.4.4 (latest) double-freeinfo

Titleappneta tcpreplay 4.4.4 (latest) double-free
DescriptionA double-free vulnerability exists within the tcprewrite utility of the tcpreplay suite. When handling specific packet capture files, tcprewrite may attempt to free the same memory location twice leading to potential code execution, denial of service, or memory corruption scenarios. The issue occurs in the tcpedit_dlt_cleanup function, as part of the dlt_plugins.c code, and can be triggered under certain conditions, as evidenced by the provided crash file and stack trace pointing to a problem when cleaning up resources.
Source⚠️ https://github.com/appneta/tcpreplay/issues/850
User
 MSXF (UID 62382)
Submission03/10/2024 09:11 (2 years ago)
Moderation03/19/2024 10:01 (9 days later)
StatusDuplicate
VulDB entry248422 [tcpreplay TCPrewrite 4.4.3/4.4.4 plugins/dlt_plugins.c tcpedit_dlt_cleanup double free]
Points0

Do you need the next level of professionalism?

Upgrade your account now!