7.5Alta
CVE-2025-51005
Descripción
A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the program incorrectly handles memory in the checksum calculation logic at do_checksum_math_liveplay in tcpliveplay.c, leading to a possible denial of service.
Debilidad (CWE):
CWE-122
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
Referencias y parches
- https://github.com/appneta/tcpreplay/issues/925 ExploitIssue TrackingVendor Advisory
- https://github.com/sy460129/CVE-2025-51005 ExploitThird Party Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:broadcom:tcpreplay:4.5.1:*:*:*:*:*:*:*