HIGH
tcpreplay: memory leak in fix_ipv6_checksums() function
Published May 4, 2022
7.5
HIGHCVSS 3.1
EPSS 2.01%
Description
Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.
Affected products
No data.
Configuration 2
OR
- 35
- 36
- 37
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Red Hat statement
No Red Hat supported products are affected by this vulnerability.
Weaknesses (1)
References (10)
- https://access.redhat.com/security/cve/CVE-2022-28487 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2081860 Issue Tracking
- https://github.com/appneta/tcpreplay/issues/723 ExploitIssue TrackingThird Party Advisory
- https://github.com/appneta/tcpreplay/pull/720 PatchThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/ vendor-advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/ vendor-advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/ vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-28487
- https://security.gentoo.org/glsa/202210-08 vendor-advisoryThird Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-28487
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2022-28487 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2081860 | Issue Tracking | |
| https://github.com/appneta/tcpreplay/issues/723 | ExploitIssue TrackingThird Party Advisory | |
| https://github.com/appneta/tcpreplay/pull/720 | PatchThird Party Advisory | |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/ | vendor-advisory | |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/ | vendor-advisory | |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/ | vendor-advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2022-28487 | ||
| https://security.gentoo.org/glsa/202210-08 | vendor-advisoryThird Party Advisory | |
| https://www.cve.org/CVERecord?id=CVE-2022-28487 |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published May 4, 2022
Updated Aug 3, 2024
Reserved Apr 4, 2022
Link CVE-2022-28487
CISA Vulnrichment
Updated n/a