tcpreplay is vulnerable to heap-based buffer overflow. The vulnerability exists the component tcprewrite
in get_l2len_protocol
where a manipulation with an unknown input leads to a memory corruption.
github.com/appneta/tcpreplay/issues/735
lists.fedoraproject.org/archives/list/[email protected]/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/
lists.fedoraproject.org/archives/list/[email protected]/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/
lists.fedoraproject.org/archives/list/[email protected]/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/
security-tracker.debian.org/tracker/CVE-2022-37048
security.gentoo.org/glsa/202210-08