CVE-2025-9385mediumCWE-119CWE-416

CVE-2025-9385: falha de média gravidade em appneta tcpreplay

appneta tcpreplay tcprewrite edit_packet.c fix_ipv6_checksums use after free

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar tcpreplay+ Monitorar tcpreplay

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.8epss 0.3%
A flaw has been found in appneta tcpreplay up to 4.5.1. The affected element is the function fix_ipv6_checksums of the file edit_packet.c of the component tcprewrite. This manipulation causes use after free. The attack is restricted to local execution. The exploit has been published and may be used. Upgrading to version 4.5.2-beta3 is sufficient to fix this issue. It is advisable to upgrade the affected component.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
appneta · tcpreplay
CVEs relacionadas — appneta tcpreplay

No mesmo produto, das mais perigosas para as menos.

CVE-2024-3024MEDIUMappneta tcpreplay get.c get_layer4_v6 heap-based overflowEPSS 0.4%CVE-2025-9649MEDIUMappneta tcpreplay send_packets.c calc_sleep_time divide by zeroEPSS 0.3%CVE-2025-9384MEDIUMappneta tcpreplay parse_args.c tcpedit_post_args null pointer dereferenceEPSS 0.3%CVE-2025-9386MEDIUMappneta tcpreplay tcprewrite get.c get_l2len_protocol use after freeEPSS 0.3%CVE-2025-9157MEDIUMappneta tcpreplay tcprewrite edit_packet.c untrunc_packet use after freeEPSS 0.2%