An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c.
    It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to     cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact. (CVE-2019-8381)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function
    get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-
    edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have
    unspecified other impact. (CVE-2019-8376)

  - An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function
    get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the
    tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly
    have unspecified other impact. (CVE-2019-8377)

  - An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c.
    It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to
    cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact. (CVE-2019-8381)

fklassen on Github reports :

This release fixes the following security issues :

- memory access in do_checksum()

- NULL pointer dereference get_layer4_v6()

- NULL pointer dereference get_ipv6_l4proto()

Patch CVE-2019-8376, CVE-2019-8377 and CVE-2019-8381.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
254918	Linux Distros Unpatched Vulnerability : CVE-2019-8381	Nessus	Misc.	high
426667	Alpine: multiple tcpreplay packages: security update to 4.3.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
426667	Alpine: multiple tcpreplay packages: security update to 4.3.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
137381	FreeBSD : tcpreplay -- Multiple vulnerabilities (045e46e8-abe6-11ea-99cb-10bf48e1088e)	Nessus	FreeBSD Local Security Checks	high
124510	Fedora 30 : tcpreplay (2019-7d689dd314)	Nessus	Fedora Local Security Checks	critical
123050	Fedora 29 : tcpreplay (2019-e40253f67e)	Nessus	Fedora Local Security Checks	critical
123045	Fedora 28 : tcpreplay (2019-a9c08d4b40)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2019-8381

high

Tenable Plugins

high

high

high

high

critical

critical

critical