There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function
    get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-
    edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have
    unspecified other impact. (CVE-2019-8376)

  - An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function
    get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the
    tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly
    have unspecified other impact. (CVE-2019-8377)

  - An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c.
    It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to
    cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact. (CVE-2019-8381)

fklassen on Github reports :

This release fixes the following security issues :

- memory access in do_checksum()

- NULL pointer dereference get_layer4_v6()

- NULL pointer dereference get_ipv6_l4proto()

This release contains bug fixes only (which includes security fixes) :

  - Increase cache buffers size to accomodate VLAN edits     (#594)

  - Correct L2 header length to correct IP header offset     (#583)

  - Fix warnings from gcc version 10 (#580)

  - Heap Buffer Overflow in randomize_iparp (#579)

  - Use after free in get_ipv6_next (#578)

  - Heap Buffer Overflow in git_ipv6_next (#576)

  - Call pcap_freecode() on pcap_compile() (#572)

  - Increase max snaplen to 262144 (#571)

  - Fix divide by zero in fuzzing (#570)

  - Unique IP repeats at very high iteration counts (#566)

  - Fails to compile on FreeBSD amd64 13.0 (#558)

  - Heap Buffer Overflow in do_checksum (#556) (#577)

  - Attempt to correct corrupt pcap files, if possible     (#557)

  - Fix GCC v10 warnings (#555)

  - Remove some duplicated SOURCES entries (#551)

  - Expand /dev/bpfX hard limit to fix macOS Mojave (#550)

  - Implement --loopdelay-ms when using --loop=0 (#546)

  - Heap overflow packet2tree and get_l2len (#530)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Patch CVE-2019-8376, CVE-2019-8377 and CVE-2019-8381.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function     get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the     tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly     have unspecified other impact. (CVE-2019-8377)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
426667	Alpine: multiple tcpreplay packages: security update to 4.3.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	5/16/2025	7/2/2026	high
426667	Alpine: multiple tcpreplay packages: security update to 4.3.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	5/16/2025	7/2/2026	high
137381	FreeBSD : tcpreplay -- Multiple vulnerabilities (045e46e8-abe6-11ea-99cb-10bf48e1088e)	Nessus	FreeBSD Local Security Checks	6/12/2020	3/7/2024	high
137767	Fedora 32 : tcpreplay (2020-f47830961a)	Nessus	Fedora Local Security Checks	6/24/2020	3/6/2024	critical
123050	Fedora 29 : tcpreplay (2019-e40253f67e)	Nessus	Fedora Local Security Checks	3/25/2019	6/13/2024	critical
258641	Linux Distros Unpatched Vulnerability : CVE-2019-8377	Nessus	Misc.	8/30/2025	7/24/2026	high
123045	Fedora 28 : tcpreplay (2019-a9c08d4b40)	Nessus	Fedora Local Security Checks	3/25/2019	6/13/2024	critical
124510	Fedora 30 : tcpreplay (2019-7d689dd314)	Nessus	Fedora Local Security Checks	5/2/2019	5/29/2024	critical
137788	Fedora 31 : tcpreplay (2020-256ac53cc7)	Nessus	Fedora Local Security Checks	6/25/2020	3/6/2024	critical

Detections

Analytics

Plugins Search

high

high

high

critical

critical

high

critical

critical

critical