CVE-2025-9386appneta tcpreplay tcprewrite get.c get_l2len_protocol use after free

Açıklama

A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function get_l2len_protocol of the file get.c of the component tcprewrite. Such manipulation leads to use after free. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Upgrading to version 4.5.2-beta3 is sufficient to resolve this issue. You should upgrade the affected component.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Kaynaklar ve yamalar

• VDB-321219 | appneta tcpreplay tcprewrite get.c get_l2len_protocol use after free vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-321219 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• Submit #630498 | tcpreplay tcprewrite tcpreplay version 6fcbf03 (the newest master in https://github.com/appneta/tcpreplay) Use-After-Free third-party-advisoryThird Party AdvisoryVDB Entry
• https://github.com/appneta/tcpreplay/issues/973 issue-trackingExploitIssue TrackingVendor Advisory
• https://drive.google.com/file/d/1DcQWaTmj1HSbRidOCWwe9vtgHsBnFuX7/view?usp=sharing exploitExploit