7.5High
CVE-2025-51005
Description
A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the program incorrectly handles memory in the checksum calculation logic at do_checksum_math_liveplay in tcpliveplay.c, leading to a possible denial of service.
Weakness (CWE):
CWE-122
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
References and patches
- https://github.com/appneta/tcpreplay/issues/925 ExploitIssue TrackingVendor Advisory
- https://github.com/sy460129/CVE-2025-51005 ExploitThird Party Advisory
CPE matches (NVD) (1)
cpe:2.3:a:broadcom:tcpreplay:4.5.1:*:*:*:*:*:*:*