GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Thu May 27, 2021 3:26 am Post subject: [ GLSA 202105-21 ] Tcpreplay |
|
|
Gentoo Linux Security Advisory
Title: Tcpreplay: Multiple vulnerabilities (GLSA 202105-21)
Severity: low
Exploitable: local
Date: 2021-05-26
Bug(s): #750344
ID: 202105-21
Synopsis
Multiple vulnerabilities have been found in Tcpreplay, the worst of
which could result in a Denial of Service condition.
Background
Tcpreplay is a suite of utilities for UNIX systems for editing and
replaying network traffic which was previously captured by tools like
tcpdump and ethereal/wireshark.
Affected Packages
Package: net-analyzer/tcpreplay
Vulnerable: < 4.3.4
Unaffected: >= 4.3.4
Architectures: All supported architectures
Description
Multiple vulnerabilities have been discovered in Tcpreplay. Please
review the CVE identifiers referenced below for details.
Impact
A remote attacker could entice a user to open a specially crafted
network capture file using Tcpreplay, possibly resulting in a Denial of
Service condition.
Workaround
There is no known workaround at this time.
Resolution
All Tcpreplay users should upgrade to the latest version: Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=net-analyzer/tcpreplay-4.3.4"
|
References
CVE-2020-24265
CVE-2020-24266 |
|