CVE-2023-4256

Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This flaw enables a local attacker to initiate a Denial of Service (DoS) attack.

Affected

Fedora · tcpreplay · Extra Packages for Enterprise Linux

CVSS v3.1 NVD

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.33% chance of exploitation in the next 30 days, 24th percentile

Published

2023-12-21

Updated

2025-02-13

Proof-of-concept exploits (1)

• appneta/tcpreplay/issues/8131353★ · 2026-08-15

Security advisories

• https://bugzilla.redhat.com/show_bug.cgi?id=2255212

References

• CVE Record
• NVD entry

Related

• CVE-2017-6429
• CVE-2018-13112
• CVE-2018-17580
• CVE-2018-17582
• CVE-2018-17974
• CVE-2018-18407