CVE-2025-9386appneta tcpreplay tcprewrite get.c get_l2len_protocol use after free

Description

A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function get_l2len_protocol of the file get.c of the component tcprewrite. Such manipulation leads to use after free. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Upgrading to version 4.5.2-beta3 is sufficient to resolve this issue. You should upgrade the affected component.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• VDB-321219 | appneta tcpreplay tcprewrite get.c get_l2len_protocol use after free vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-321219 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• Submit #630498 | tcpreplay tcprewrite tcpreplay version 6fcbf03 (the newest master in https://github.com/appneta/tcpreplay) Use-After-Free third-party-advisoryThird Party AdvisoryVDB Entry
• https://github.com/appneta/tcpreplay/issues/973 issue-trackingExploitIssue TrackingVendor Advisory
• https://drive.google.com/file/d/1DcQWaTmj1HSbRidOCWwe9vtgHsBnFuX7/view?usp=sharing exploitExploit