SecuritySpace - CVE-2018-17582

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2018-17582

Description: Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The get_next_packet() function in the send_packets.c file uses the memcpy() function unsafely to copy sequences from the source buffer pktdata to the destination (*prev_packet)->pktdata. This will result in a Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a file.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-17582
https://github.com/SegfaultMasters/covering360/blob/master/tcpreplay
https://github.com/appneta/tcpreplay/issues/484

CVE ID:	CVE-2018-17582
Description:	Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The get_next_packet() function in the send_packets.c file uses the memcpy() function unsafely to copy sequences from the source buffer pktdata to the destination (*prev_packet)->pktdata. This will result in a Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a file.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-17582 https://github.com/SegfaultMasters/covering360/blob/master/tcpreplay https://github.com/appneta/tcpreplay/issues/484