CVE-2025-9157mediumCWE-119CWE-416

CVE-2025-9157: medium-severity vulnerability in appneta tcpreplay

appneta tcpreplay tcprewrite edit_packet.c untrunc_packet use after free

Published

Follow this CVE+ Monitor tcpreplay+ Monitor tcpreplay

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.8epss 0.2%
A vulnerability was determined in appneta tcpreplay up to 4.5.2-beta2. The impacted element is the function untrunc_packet of the file src/tcpedit/edit_packet.c of the component tcprewrite. Executing manipulation can lead to use after free. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. This patch is called 73008f261f1cdf7a1087dc8759115242696d35da. Applying a patch is advised to resolve this issue.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
appneta · tcpreplay
Related CVEs — appneta tcpreplay

In the same product, most dangerous first.

CVE-2024-3024MEDIUMappneta tcpreplay get.c get_layer4_v6 heap-based overflowEPSS 0.4%CVE-2025-9649MEDIUMappneta tcpreplay send_packets.c calc_sleep_time divide by zeroEPSS 0.3%CVE-2025-9384MEDIUMappneta tcpreplay parse_args.c tcpedit_post_args null pointer dereferenceEPSS 0.3%CVE-2025-9385MEDIUMappneta tcpreplay tcprewrite edit_packet.c fix_ipv6_checksums use after freeEPSS 0.3%CVE-2025-9386MEDIUMappneta tcpreplay tcprewrite get.c get_l2len_protocol use after freeEPSS 0.3%