An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8376
Reference (s):
- BID:107085
- URL: http://www.securityfocus.com/bid/107085
- FEDORA:FEDORA-2019-7d689dd314
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EB3ASS7URTIA3IFSBL2DIWJAFKTBJCAW/
- FEDORA:FEDORA-2019-a9c08d4b40