← Back

Tcpreplay

tcpreplay

Vendor: Broadcom • 50 CVEs

CVEs (50)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Aug 18, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at common/get.c:713. NOTE: this is different from CVE-2022-27940.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
May 4, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.
1Broadcom
1Tcpreplay
Jun 17, 2026
Apr 12, 2022
N/A· v4
7.8 HIGH· v3
5.1 MEDIUM· v2
Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c.
1Broadcom
1Tcpreplay
Jun 17, 2026
Apr 12, 2022
N/A· v4
7.8 HIGH· v3
5.1 MEDIUM· v2
Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Mar 26, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Mar 26, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Mar 26, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Mar 26, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c.
1Broadcom
1Tcpreplay
Jun 17, 2026
Mar 22, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1.
1Broadcom
1Tcpreplay
Jun 17, 2026
Feb 11, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4() at tree.c.
1Broadcom
1Tcpreplay
Jun 17, 2026
Feb 11, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c
1Broadcom
1Tcpreplay
Jun 17, 2026
Sep 22, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Heap-buffer overflow in the randomize_iparp function in edit_packet.c. of Tcpreplay v4.3.2 allows attackers to cause a denial of service (DOS) via a crafted pcap.
1Broadcom
1Tcpreplay
Jun 17, 2026
Aug 25, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'do_checksum' function in 'checksum.c'. It can be triggered by sending a crafted pcap file to the 'tcpreplay-edit' binary. This is...Show more
Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'do_checksum' function in 'checksum.c'. It can be triggered by sending a crafted pcap file to the 'tcpreplay-edit' binary. This issue is different than CVE-2019-8381.Show less
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Oct 19, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that can make tcpprep crash and cause a denial of service.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Oct 19, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep crash and cause a denial of service.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
May 8, 2020
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a get_c operation. The issue is being triggered in the function get_ipv6_next() at common/get.c.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Feb 17, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a...Show more
An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.Show less
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Feb 17, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It a...Show more
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.Show less
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Feb 17, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allo...Show more
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.Show less
1Broadcom
1Tcpreplay
Nov 21, 2024
Dec 28, 2018
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c.