Double-Free Vulnerability in Tcpreplay Software from AppNeta
CVE-2022-27416

7.8HIGH

Key Information:

Vendor
Broadcom
Status
Tcpreplay
Vendor
CVE Published:
12 April 2022

Summary

A double-free vulnerability was identified in Tcpreplay v4.4.1, which could lead to application instability and potential exploitation. This security flaw, occurring via the __interceptor_free method, can be triggered through improper memory management, making it crucial for users to update to a patched version to maintain security integrity. Refer to the official advisories and documentation to understand the specifics of the vulnerability and the necessary mitigations.

References

https://github.com/appneta/tcpreplay/issues/702
https://security.gentoo.org/glsa/202210-08
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.