CVE-2022-27941

Description

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c.

Affected Platforms

Weakness Type

CWE-125

References

• https://github.com/appneta/tcpreplay/issues/716
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://security.gentoo.org/glsa/202210-08
• https://github.com/appneta/tcpreplay/issues/716