An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

fklassen on Github reports :

This release fixes the following security issues :

- memory access in do_checksum()

- NULL pointer dereference get_layer4_v6()

- NULL pointer dereference get_ipv6_l4proto()

Patch CVE-2019-8376, CVE-2019-8377 and CVE-2019-8381.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
137381	FreeBSD : tcpreplay -- Multiple vulnerabilities (045e46e8-abe6-11ea-99cb-10bf48e1088e)	Nessus	FreeBSD Local Security Checks	high
124510	Fedora 30 : tcpreplay (2019-7d689dd314)	Nessus	Fedora Local Security Checks	critical
123050	Fedora 29 : tcpreplay (2019-e40253f67e)	Nessus	Fedora Local Security Checks	critical
123045	Fedora 28 : tcpreplay (2019-a9c08d4b40)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2019-8381

high

Tenable Plugins

high

critical

critical

critical