An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep crash and cause a denial of service.
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "tcpreplay", "binary_version": "4.2.6-1ubuntu0.1~esm3" }, { "binary_name": "tcpreplay-dbgsym", "binary_version": "4.2.6-1ubuntu0.1~esm3" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "tcpreplay", "binary_version": "4.3.2-1ubuntu0.1~esm1" }, { "binary_name": "tcpreplay-dbgsym", "binary_version": "4.3.2-1ubuntu0.1~esm1" } ] }