Heap Buffer Overflow in tcpreplay tcpprep Affects AppNeta
CVE-2020-24266
7.5HIGH
Summary
A heap buffer overflow vulnerability was identified in the get_l2len() function of tcpreplay’s tcpprep tool, version 4.3.3. This flaw can cause the application to crash, resulting in a denial of service. Exploiting this vulnerability may lead to unintended application behavior and interruptions in service, raising significant concern for users relying on tcpreplay for network packet replay functionalities. It is crucial for affected parties to follow the security advisories from AppNeta and apply recommended updates to mitigate potential risks.
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved