OPENSUSE-SU-2024:11426-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 20:18
Summary
tcpreplay-4.3.4-1.3 on GA media
Severity
Moderate
Notes
Title of the patch: tcpreplay-4.3.4-1.3 on GA media
Description of the patch: These are all security issues fixed in the tcpreplay-4.3.4-1.3 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-11426
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2017-6429
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2018-17580
7.1 (High)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-6429
Threats
Impact important
CVE-2018-17582
7.1 (High)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-6429
Threats
Impact important
CVE-2018-17974
5.5 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-6429
Threats
Impact moderate
CVE-2018-18407
5.5 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-6429
Threats
Impact moderate
CVE-2018-18408
9.8 (Critical)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-6429
Threats
Impact critical
CVE-2019-8376
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-6429
Threats
Impact important
CVE-2019-8377
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-6429
Threats
Impact important
CVE-2019-8381
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-6429
Threats
Impact important
CVE-2020-24265
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-6429
Threats
Impact moderate
CVE-2020-24266
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-6429
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://www.suse.com/security/cve/CVE-2017-6429/ self
https://www.suse.com/security/cve/CVE-2018-17580/ self
https://www.suse.com/security/cve/CVE-2018-17582/ self
https://www.suse.com/security/cve/CVE-2018-17974/ self
https://www.suse.com/security/cve/CVE-2018-18407/ self
https://www.suse.com/security/cve/CVE-2018-18408/ self
https://www.suse.com/security/cve/CVE-2019-8376/ self
https://www.suse.com/security/cve/CVE-2019-8377/ self
https://www.suse.com/security/cve/CVE-2019-8381/ self
https://www.suse.com/security/cve/CVE-2020-24265/ self
https://www.suse.com/security/cve/CVE-2020-24266/ self
https://www.suse.com/security/cve/CVE-2017-6429 external
https://bugzilla.suse.com/1028234 external
https://www.suse.com/security/cve/CVE-2018-17580 external
https://bugzilla.suse.com/1110333 external
https://www.suse.com/security/cve/CVE-2018-17582 external
https://bugzilla.suse.com/1110285 external
https://www.suse.com/security/cve/CVE-2018-17974 external
https://bugzilla.suse.com/1110786 external
https://www.suse.com/security/cve/CVE-2018-18407 external
https://bugzilla.suse.com/1112355 external
https://www.suse.com/security/cve/CVE-2018-18408 external
https://bugzilla.suse.com/1112354 external
https://www.suse.com/security/cve/CVE-2019-8376 external
https://bugzilla.suse.com/1125755 external
https://www.suse.com/security/cve/CVE-2019-8377 external
https://bugzilla.suse.com/1125754 external
https://www.suse.com/security/cve/CVE-2019-8381 external
https://bugzilla.suse.com/1125753 external
https://bugzilla.suse.com/1189837 external
https://www.suse.com/security/cve/CVE-2020-24265 external
https://www.suse.com/security/cve/CVE-2020-24266 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "tcpreplay-4.3.4-1.3 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the tcpreplay-4.3.4-1.3 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-11426",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11426-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-6429 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-6429/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-17580 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-17580/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-17582 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-17582/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-17974 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-17974/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-18407 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-18407/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-18408 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-18408/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-8376 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-8376/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-8377 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-8377/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-8381 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-8381/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-24265 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-24265/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-24266 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-24266/"
      }
    ],
    "title": "tcpreplay-4.3.4-1.3 on GA media",
    "tracking": {
      "current_release_date": "2026-09-20T20:18:08Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:11426-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T20:18:08Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tcpreplay-0:4.3.4-1.3.aarch64",
                "product": {
                  "name": "tcpreplay-0:4.3.4-1.3.aarch64",
                  "product_id": "tcpreplay-0:4.3.4-1.3.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:appneta:tcpreplay:4.3.4:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tcpreplay@4.3.4-1.3?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tcpreplay-0:4.3.4-1.3.ppc64le",
                "product": {
                  "name": "tcpreplay-0:4.3.4-1.3.ppc64le",
                  "product_id": "tcpreplay-0:4.3.4-1.3.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:appneta:tcpreplay:4.3.4:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tcpreplay@4.3.4-1.3?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tcpreplay-0:4.3.4-1.3.s390x",
                "product": {
                  "name": "tcpreplay-0:4.3.4-1.3.s390x",
                  "product_id": "tcpreplay-0:4.3.4-1.3.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:appneta:tcpreplay:4.3.4:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tcpreplay@4.3.4-1.3?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tcpreplay-0:4.3.4-1.3.x86_64",
                "product": {
                  "name": "tcpreplay-0:4.3.4-1.3.x86_64",
                  "product_id": "tcpreplay-0:4.3.4-1.3.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:appneta:tcpreplay:4.3.4:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tcpreplay@4.3.4-1.3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tcpreplay-0:4.3.4-1.3.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64"
        },
        "product_reference": "tcpreplay-0:4.3.4-1.3.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tcpreplay-0:4.3.4-1.3.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le"
        },
        "product_reference": "tcpreplay-0:4.3.4-1.3.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tcpreplay-0:4.3.4-1.3.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x"
        },
        "product_reference": "tcpreplay-0:4.3.4-1.3.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tcpreplay-0:4.3.4-1.3.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
        },
        "product_reference": "tcpreplay-0:4.3.4-1.3.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-6429",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-6429"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an over-size packet.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-6429",
          "url": "https://www.suse.com/security/cve/CVE-2017-6429"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028234 for CVE-2017-6429",
          "url": "https://bugzilla.suse.com/1028234"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-6429"
    },
    {
      "cve": "CVE-2018-17580",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-17580"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A heap-based buffer over-read exists in the function fast_edit_packet() in the file send_packets.c of Tcpreplay v4.3.0 beta1. This can lead to Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a crafted pcap file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-17580",
          "url": "https://www.suse.com/security/cve/CVE-2018-17580"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1110333 for CVE-2018-17580",
          "url": "https://bugzilla.suse.com/1110333"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-17580"
    },
    {
      "cve": "CVE-2018-17582",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-17582"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The get_next_packet() function in the send_packets.c file uses the memcpy() function unsafely to copy sequences from the source buffer pktdata to the destination (*prev_packet)-\u003epktdata. This will result in a Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-17582",
          "url": "https://www.suse.com/security/cve/CVE-2018-17582"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1110285 for CVE-2018-17582",
          "url": "https://bugzilla.suse.com/1110285"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-17582"
    },
    {
      "cve": "CVE-2018-17974",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-17974"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Tcpreplay 4.3.0 beta1. A heap-based buffer over-read was triggered in the function dlt_en10mb_encode() of the file plugins/dlt_en10mb/en10mb.c, due to inappropriate values in the function memmove(). The length (pktlen + ctx -\u003e l2len) can be larger than source value (packet + ctx-\u003el2len) because the function fails to ensure the length of a packet is valid. This leads to Denial of Service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-17974",
          "url": "https://www.suse.com/security/cve/CVE-2018-17974"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1110786 for CVE-2018-17974",
          "url": "https://bugzilla.suse.com/1110786"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-17974"
    },
    {
      "cve": "CVE-2018-18407",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-18407"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The issue gets triggered in the function csum_replace4() in incremental_checksum.h, causing a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-18407",
          "url": "https://www.suse.com/security/cve/CVE-2018-18407"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112355 for CVE-2018-18407",
          "url": "https://bugzilla.suse.com/1112355"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-18407"
    },
    {
      "cve": "CVE-2018-18408",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-18408"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free was discovered in the tcpbridge binary of Tcpreplay 4.3.0 beta1. The issue gets triggered in the function post_args() at tcpbridge.c, causing a denial of service or possibly unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-18408",
          "url": "https://www.suse.com/security/cve/CVE-2018-18408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112354 for CVE-2018-18408",
          "url": "https://bugzilla.suse.com/1112354"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2018-18408"
    },
    {
      "cve": "CVE-2019-8376",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-8376"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-8376",
          "url": "https://www.suse.com/security/cve/CVE-2019-8376"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1125755 for CVE-2019-8376",
          "url": "https://bugzilla.suse.com/1125755"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-8376"
    },
    {
      "cve": "CVE-2019-8377",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-8377"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-8377",
          "url": "https://www.suse.com/security/cve/CVE-2019-8377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1125754 for CVE-2019-8377",
          "url": "https://bugzilla.suse.com/1125754"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-8377"
    },
    {
      "cve": "CVE-2019-8381",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-8381"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-8381",
          "url": "https://www.suse.com/security/cve/CVE-2019-8381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1125753 for CVE-2019-8381",
          "url": "https://bugzilla.suse.com/1125753"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1189837 for CVE-2019-8381",
          "url": "https://bugzilla.suse.com/1189837"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-8381"
    },
    {
      "cve": "CVE-2020-24265",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-24265"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep crash and cause a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-24265",
          "url": "https://www.suse.com/security/cve/CVE-2020-24265"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-24265"
    },
    {
      "cve": "CVE-2020-24266",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-24266"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that can make tcpprep crash and cause a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
          "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-24266",
          "url": "https://www.suse.com/security/cve/CVE-2020-24266"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.aarch64",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.ppc64le",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.s390x",
            "openSUSE Tumbleweed:tcpreplay-0:4.3.4-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-24266"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.