← back
CVE-2025-9157

appneta tcpreplay tcprewrite edit_packet.c untrunc_packet use after free

CVSS 4.8 MEDIUMEPSS 0.1%CWE-119CWE-416
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.8EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
19 Aug 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability was determined in appneta tcpreplay up to 4.5.2-beta2. The impacted element is the function untrunc_packet of the file src/tcpedit/edit_packet.c of the component tcprewrite. Executing manipulation can lead to use after free. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. This patch is called 73008f261f1cdf7a1087dc8759115242696d35da. Applying a patch is advised to resolve this issue.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
appneta · tcpreplay

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://drive.google.com/file/d/1_aONM_TOF96JbnYviPyZhVk-7HObtX8H/view?usp=sharinghttps://github.com/appneta/tcpreplay/commit/73008f261f1cdf7a1087dc8759115242696d35dahttps://github.com/appneta/tcpreplay/issues/970https://github.com/appneta/tcpreplay/issues/970#issuecomment-3198966053https://vuldb.com/?ctiid.320537https://vuldb.com/?id.320537https://vuldb.com/?submit.630495