Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an over-size packet.

Here is what is fixed in this release :

  - Fix reporting of rates < 1Mbps (#348)

  - Option --unique-ip not working properly (#346)

----

Features and fixes include :

  - MAC rewriting capabilities by Pedro Arthur (#313)

  - Fix several issues identified by Coverity (#305)

  - Packet distortion --fuzz-seed option by Gabriel Ganne     (#302)

  - Add --unique-ip-loops option to modify IPs every few     loops (#296)

  - Netmap startup delay increase (#290)

  - tcpcapinfo buffer overflow vulnerablily (#278)

  - Update git-clone instructions by Kyle McDonald (#277)

  - Allow fractions for --pps option (#270)

  - Print per-loop stats with --stats=0 (#269)

  - Add protection against packet drift by Guillaume Scott     (#268)

  - Print flow stats periodically with --stats output (#262)

  - Include Travis-CI build support by Ilya Shipitsin (#264)     (#285)

  - tcpreplay won't replay all packets in a pcap file with
    --netmap (#255)

  - First and last packet times in --stats output (#239)

  - Switch to wire speed after 30 minutes at 6 Gbps (#210)

  - tcprewrite fix checksum properly for fragmented packets     (#190)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for tcpreplay fixes the following issues :

  - CVE-2017-6429: Buffer overflow in Tcpcapinfo utility     triggered by a too large packet (boo#1028234)

Patch CVE-2017-6429.

Tcpcapinfo utility of Tcpreplay has a buffer overflow vulnerability associated with parsing a crafted pcap file. This occurs in the src/tcpcapinfo.c file when capture has a packet that is too large to handle.

References :

http://seclists.org/bugtraq/2017/Mar/22

Upstream bug :

https://github.com/appneta/tcpreplay/issues/278

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
101673	Fedora 26 : tcpreplay (2017-8306577cc7)	Nessus	Fedora Local Security Checks	high
99146	Fedora 24 : tcpreplay (2017-7980b5e846)	Nessus	Fedora Local Security Checks	high
99144	Fedora 25 : tcpreplay (2017-5e945de883)	Nessus	Fedora Local Security Checks	high
99022	openSUSE Security Update : tcpreplay (openSUSE-2017-390)	Nessus	SuSE Local Security Checks	high
97786	Fedora 24 : tcpreplay (2017-936a79ee30)	Nessus	Fedora Local Security Checks	high
97764	Fedora 25 : tcpreplay (2017-dc1828d4f9)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2017-6429

high

Tenable Plugins

high

high

high

high

high

high