An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

This release contains bug fixes only (which includes security fixes) :

  - Increase cache buffers size to accomodate VLAN edits     (#594)

  - Correct L2 header length to correct IP header offset     (#583)

  - Fix warnings from gcc version 10 (#580)

  - Heap Buffer Overflow in randomize_iparp (#579)

  - Use after free in get_ipv6_next (#578)

  - Heap Buffer Overflow in git_ipv6_next (#576)

  - Call pcap_freecode() on pcap_compile() (#572)

  - Increase max snaplen to 262144 (#571)

  - Fix divide by zero in fuzzing (#570)

  - Unique IP repeats at very high iteration counts (#566)

  - Fails to compile on FreeBSD amd64 13.0 (#558)

  - Heap Buffer Overflow in do_checksum (#556) (#577)

  - Attempt to correct corrupt pcap files, if possible     (#557)

  - Fix GCC v10 warnings (#555)

  - Remove some duplicated SOURCES entries (#551)

  - Expand /dev/bpfX hard limit to fix macOS Mojave (#550)

  - Implement --loopdelay-ms when using --loop=0 (#546)

  - Heap overflow packet2tree and get_l2len (#530)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

fklassen on Github reports :

This release fixes the following security issues :

- memory access in do_checksum()

- NULL pointer dereference get_layer4_v6()

- NULL pointer dereference get_ipv6_l4proto()

Patch CVE-2019-8376, CVE-2019-8377 and CVE-2019-8381.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
137788	Fedora 31 : tcpreplay (2020-256ac53cc7)	Nessus	Fedora Local Security Checks	critical
137767	Fedora 32 : tcpreplay (2020-f47830961a)	Nessus	Fedora Local Security Checks	critical
137381	FreeBSD : tcpreplay -- Multiple vulnerabilities (045e46e8-abe6-11ea-99cb-10bf48e1088e)	Nessus	FreeBSD Local Security Checks	high
124510	Fedora 30 : tcpreplay (2019-7d689dd314)	Nessus	Fedora Local Security Checks	critical
123050	Fedora 29 : tcpreplay (2019-e40253f67e)	Nessus	Fedora Local Security Checks	critical
123045	Fedora 28 : tcpreplay (2019-a9c08d4b40)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2019-8377

high

Tenable Plugins

critical

critical

high

critical

critical

critical