Tcpreplay
This hub aggregates every CVE we track for Tcpreplay, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
51
CVEs tracked
2
Critical
32
High
0
In CISA KEV
Severity distribution
HIGH32MEDIUM14LOW3CRITICAL2
Monthly trend
0
0
0
0
0
0
0
0
0
0
1
0
0
6
2
0
0
0
0
0
0
0
0
0
2024-072026-06
Latest CVEs
The 15 most recently published vulnerabilities affecting Tcpreplay.
- CVE-2025-51005A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the program incorrectly handles memory in the checksum calculat...7.5
- CVE-2025-51006Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dlt_linuxsll2_cleanup() function in plugins/dlt_linuxsll2/linuxsll2.c. This vulnerability is triggered when tcp...7.8
- CVE-2025-9649appneta tcpreplay send_packets.c calc_sleep_time divide by zero3.3
- CVE-2025-9386appneta tcpreplay tcprewrite get.c get_l2len_protocol use after free5.3
- CVE-2025-9385appneta tcpreplay tcprewrite edit_packet.c fix_ipv6_checksums use after free5.3
- CVE-2025-9384appneta tcpreplay parse_args.c tcpedit_post_args null pointer dereference3.3
- CVE-2025-9157appneta tcpreplay tcprewrite edit_packet.c untrunc_packet use after free5.3
- CVE-2025-9019tcpreplay tcpprep cidr.c mask_cidr6 heap-based overflow3.1
- CVE-2024-22654tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c.7.5
- CVE-2024-3024appneta tcpreplay get.c get_layer4_v6 heap-based overflow5.3
- CVE-2023-43279Null Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to crash the application via crafted tcprewrite command.6.5
- CVE-2023-4256Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c5.5
- CVE-2023-27789An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint.7.5
- CVE-2023-27788An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint.7.5
- CVE-2023-27787An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint.7.5
Product normalization is registry-driven with AI assist and human review. How it works