Heap-based Buffer Over-read in Tcpreplay Affects Multiple Versions
CVE-2022-27942
7.8HIGH
What is CVE-2022-27942?
The Tcpreplay tool, specifically version 4.4.1, is susceptible to a heap-based buffer over-read identified in the parse_mpls function located in common/get.c. This vulnerability occurs when the application processes specific inputs, potentially leading to information disclosure or unexpected behavior. Users should ensure their installation of Tcpreplay is updated to the latest version to mitigate any risks associated with this flaw.