An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0267-1 advisory.

  - An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via     the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c. (CVE-2023-27783)

  - An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the     macinstring function. (CVE-2023-27786)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-7ffeed7339 advisory.

  - An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via     the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c. (CVE-2023-27783)

  - An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the     read_hexstring function at the utils.c:309 endpoint. (CVE-2023-27784)

  - An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the     parse endpoints function. (CVE-2023-27785)

  - An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the     macinstring function. (CVE-2023-27786)

  - An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list     function at the list.c:81 endpoint. (CVE-2023-27787)

  - An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the     ports2PORT function at the portmap.c:69 endpoint. (CVE-2023-27788)

  - An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr     function at the cidr.c:178 endpoint. (CVE-2023-27789)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-37bdea9241 advisory.

  - An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via     the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c. (CVE-2023-27783)

  - An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the     read_hexstring function at the utils.c:309 endpoint. (CVE-2023-27784)

  - An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the     parse endpoints function. (CVE-2023-27785)

  - An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the     macinstring function. (CVE-2023-27786)

  - An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list     function at the list.c:81 endpoint. (CVE-2023-27787)

  - An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the     ports2PORT function at the portmap.c:69 endpoint. (CVE-2023-27788)

  - An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr     function at the cidr.c:178 endpoint. (CVE-2023-27789)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-96ffd40fd4 advisory.

  - An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via     the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c. (CVE-2023-27783)

  - An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the     read_hexstring function at the utils.c:309 endpoint. (CVE-2023-27784)

  - An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the     parse endpoints function. (CVE-2023-27785)

  - An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the     macinstring function. (CVE-2023-27786)

  - An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list     function at the list.c:81 endpoint. (CVE-2023-27787)

  - An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the     ports2PORT function at the portmap.c:69 endpoint. (CVE-2023-27788)

  - An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr     function at the cidr.c:178 endpoint. (CVE-2023-27789)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
181921	openSUSE 15 Security Update : tcpreplay (openSUSE-SU-2023:0267-1)	Nessus	SuSE Local Security Checks	high
175669	Fedora 36 : tcpreplay (2023-7ffeed7339)	Nessus	Fedora Local Security Checks	high
175668	Fedora 38 : tcpreplay (2023-37bdea9241)	Nessus	Fedora Local Security Checks	high
175667	Fedora 37 : tcpreplay (2023-96ffd40fd4)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2023-27786

high

Tenable Plugins

high

high

high

high