Archana Polampalli b6c9eb2ce5 tcpreplay: fix CVE-2025-51006 ...

Within tcpreplay's tcprewrite, a double free vulnerability has been identified
in the dlt_linuxsll2_cleanup() function in plugins/dlt_linuxsll2/linuxsll2.c.
This vulnerability is triggered when tcpedit_dlt_cleanup() indirectly
invokes the cleanup routine multiple times on the same memory region.
By supplying a specifically crafted pcap file to the tcprewrite binary,
a local attacker can exploit this flaw to cause a Denial of Service (DoS) via memory corruption.

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>

2025-10-17 10:51:26 +02:00

..

tcpreplay

tcpreplay: fix CVE-2025-51006

2025-10-17 10:51:26 +02:00

tcpreplay_4.4.4.bb

tcpreplay: fix CVE-2025-51006

2025-10-17 10:51:26 +02:00