Lucene search

GoogleOSV:CVE-2022-28487

HistoryMay 04, 2022 - 3:15 p.m.

CVE-2022-28487

2022-05-0415:15:12

Google

osv.dev

tcpreplay

memory leakage

fix_ipv6_checksums

vulnerability

data confidentiality

software

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

56.8%

JSON

Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.

References

github.com/appneta/tcpreplay/issues/723

github.com/appneta/tcpreplay/pull/720

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/

security.gentoo.org/glsa/202210-08