Tcpreplay (Broadcom) - vulnerabilities (CVEs)

50 CVEs, 0 in the last 30 days, 115 known versions, newest CVE from 2025-09-23. Vendor: Broadcom.

CVEs of Tcpreplay

CVE-2025-51005 - CVSS 7.5 (high), 2025-09-23: A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the program incorrectly…
CVE-2025-51006 - CVSS 7.8 (high), 2025-09-22: Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dlt_linuxsll2_cleanup() function in plugins/dlt_linuxsll2/linuxsll2.c.…
CVE-2025-9649 - CVSS 5.5 (medium), 2025-08-29: A security vulnerability has been detected in appneta tcpreplay 4.5.1. Impacted is the function calc_sleep_time of the file send_packets.c. Such manipulation…
CVE-2025-9386 - CVSS 5.5 (medium), 2025-08-24: A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function get_l2len_protocol of the file get.c of the component…
CVE-2025-9385 - CVSS 5.5 (medium), 2025-08-24: A flaw has been found in appneta tcpreplay up to 4.5.1. The affected element is the function fix_ipv6_checksums of the file edit_packet.c of the component…
CVE-2025-9384 - CVSS 5.5 (medium), 2025-08-24: A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpedit_post_args of the file /src/tcpedit/parse_args.c. The…
CVE-2025-9019 - CVSS 5.9 (medium), 2025-08-15: A vulnerability has been found in tcpreplay 4.5.1. This vulnerability affects the function mask_cidr6 of the file cidr.c of the component tcpprep. The…
CVE-2024-22654 - CVSS 7.5 (high), 2025-05-29: tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c.
CVE-2024-3024 - CVSS 7.8 (high), 2024-03-28: A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function get_layer4_v6 of the file…
CVE-2023-43279 - CVSS 6.5 (medium), 2024-03-12: Null Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to crash the application via crafted tcprewrite command.
CVE-2023-4256 - CVSS 5.5 (medium), 2023-12-21: Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. This…
CVE-2023-27788 - CVSS 7.5 (high), 2023-03-16: An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint.
CVE-2023-27789 - CVSS 7.5 (high), 2023-03-16: An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint.
CVE-2023-27785 - CVSS 7.5 (high), 2023-03-16: An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.
CVE-2023-27784 - CVSS 7.5 (high), 2023-03-16: An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint.
CVE-2023-27787 - CVSS 7.5 (high), 2023-03-16: An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint.
CVE-2023-27783 - CVSS 7.5 (high), 2023-03-16: An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function at…
CVE-2023-27786 - CVSS 7.5 (high), 2023-03-16: An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.
CVE-2022-37049 - CVSS 7.8 (high), 2022-08-18: The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is different…
CVE-2022-37048 - CVSS 7.8 (high), 2022-08-18: The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protocol at common/get.c:344. NOTE: this is…
CVE-2022-37047 - CVSS 7.8 (high), 2022-08-18: The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at common/get.c:713. NOTE: this is…
CVE-2022-28487 - CVSS 7.5 (high), 2022-05-04: Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.
CVE-2022-27418 - CVSS 7.8 (high), 2022-04-12: Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c.
CVE-2022-27416 - CVSS 7.8 (high), 2022-04-12: Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free.
CVE-2022-27942 - CVSS 7.8 (high), 2022-03-26: tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.
CVE-2022-27941 - CVSS 7.8 (high), 2022-03-26: tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c.
CVE-2022-27940 - CVSS 7.8 (high), 2022-03-26: tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c.
CVE-2022-27939 - CVSS 5.5 (medium), 2022-03-26: tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c.
CVE-2022-25484 - CVSS 5.5 (medium), 2022-03-22: tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1.
CVE-2021-45387 - CVSS 5.5 (medium), 2022-02-11: tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4() at tree.c.
CVE-2021-45386 - CVSS 5.5 (medium), 2022-02-11: tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c
CVE-2020-23273 - CVSS 5.5 (medium), 2021-09-22: Heap-buffer overflow in the randomize_iparp function in edit_packet.c. of Tcpreplay v4.3.2 allows attackers to cause a denial of service (DOS) via a crafted…
CVE-2020-18976 - CVSS 5.5 (medium), 2021-08-25: Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'do_checksum' function in 'checksum.c'. It can be triggered by…
CVE-2020-24265 - CVSS 7.5 (high), 2020-10-19: An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep crash…
CVE-2020-24266 - CVSS 7.5 (high), 2020-10-19: An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that can make tcpprep crash and cause a…
CVE-2020-12740 - CVSS 9.1 (critical), 2020-05-08: tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a get_c operation. The issue is being triggered in the function get_ipv6_next()…
CVE-2019-8377 - CVSS 7.8 (high), 2019-02-17: An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by…
CVE-2019-8376 - CVSS 7.8 (high), 2019-02-17: An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by…
CVE-2019-8381 - CVSS 7.8 (high), 2019-02-17: An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file…
CVE-2018-20552 - CVSS 7.8 (high), 2018-12-28: Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c.
CVE-2018-20553 - CVSS 7.8 (high), 2018-12-28: Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c.
CVE-2018-18408 - CVSS 9.8 (critical), 2018-10-17: A use-after-free was discovered in the tcpbridge binary of Tcpreplay 4.3.0 beta1. The issue gets triggered in the function post_args() at tcpbridge.c, causing…
CVE-2018-18407 - CVSS 5.5 (medium), 2018-10-17: A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The issue gets…
CVE-2018-17974 - CVSS 5.5 (medium), 2018-10-03: An issue was discovered in Tcpreplay 4.3.0 beta1. A heap-based buffer over-read was triggered in the function dlt_en10mb_encode() of the file…
CVE-2018-17582 - CVSS 7.1 (high), 2018-09-28: Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The get_next_packet() function in the send_packets.c file uses the memcpy() function unsafely…
CVE-2018-17580 - CVSS 7.1 (high), 2018-09-28: A heap-based buffer over-read exists in the function fast_edit_packet() in the file send_packets.c of Tcpreplay v4.3.0 beta1. This can lead to Denial of…
CVE-2018-13112 - CVSS 7.5 (high), 2018-07-03: get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash)…
CVE-2017-14266 - CVSS 7.8 (high), 2017-09-12: tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160.
CVE-2017-6429 - CVSS 7.8 (high), 2017-03-15: Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an…
CVE-2016-6160 - CVSS 7.5 (high), 2017-01-23: tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service (segmentation fault) via a large frame, a related issue to…