Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-27789: tcpreplay 4.4.3 allows remote crash

CVE-2023-27789 · published 3 years ago

Summary

The tcpreplay tool version 4.4.3 on Debian can be forced to stop working by a remote user who sends specially crafted data to its cidr2cidr function. This could interrupt network testing or replay activities. Apply the latest tcpreplay update or disable the affected function until a patch is available.

What to do

Update debian tcpreplay to version 4.4.4-1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Debian:12	debian	tcpreplay	All versions
Debian:13	debian	tcpreplay	< 4.4.4-1 Fix: upgrade to 4.4.4-1
Debian:14	debian	tcpreplay	< 4.4.4-1 Fix: upgrade to 4.4.4-1
–	broadcom	tcpreplay	4.4.3 `cpe:2.3:a:broadcom:tcpreplay:4.4.3:::::::*`

Original advisory text

An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint.

References

https://security-tracker.debian.org/tracker/CVE-2023-27789 Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://github.com/appneta/tcpreplay/issues/784 Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://github.com/appneta/tcpreplay/pull/783 Patch
https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/27xxx/CVE-2023-27789... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-27789 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

7.5 High

Exploitation

1% chance of attack within 30 days

Type

CWE-617Reachable Assertion

Timeline

Published16 Mar 2023

Updated31 Oct 2026

First seen15 Sep 2026

Sources

DEBIAN-CVE-2023-27789 · OSV

CVE-2023-27789 · NVD

CVE-2023-27789 · OSV

Track software like this

Free during beta