Approved changes feed: RSS · Atom

cpe:2.3:a:broadcom:tcpreplay:4.3.0:beta2:*:*:*:*:*:*

part: a version: 4.3.0 update: beta2

VendorBroadcom (9814e701-1071-5d68-93ef-4536eaf59407)
ProductTcpreplay (e309185e-e339-5b2e-a057-ff4038b967c9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/tcpreplay purl2cpe 2026-06-01 10:11:25.066926
pkg:deb/ubuntu/tcpreplay purl2cpe 2026-06-01 10:11:25.066927
pkg:github/appneta/tcpreplay purl2cpe 2026-06-01 10:11:25.066929
pkg:rpm/fedora/tcpreplay purl2cpe 2026-06-01 10:11:25.066930
pkg:rpm/opensuse/tcpreplay purl2cpe 2026-06-01 10:11:25.066931
pkg:sourceforge/tcpreplay purl2cpe 2026-06-01 10:11:25.066933

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-17582 vulnerable 2026-06-08 05:11:06.526387 Details available
Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The get_next_packet() function in the send_packets.c file uses the memcpy() function unsafely to copy sequences from the source buffer pktdata to the destination (*prev_packet)->pktdata. This will result in a Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a file.
Published: 2018-09-28T09:00:00.000Z
Updated: 2024-08-05T10:54:10.612Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.