CVE-2024-3024 - CVE House

Back to Database

Status published Medium CVE-2024-3024

appneta tcpreplay get.c get_layer4_v6 heap-based overflow

5.3 CVSS

Vulnerability Description

A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function get_layer4_v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-258333 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-3024

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

MSXF (VulDB User)

References

More from appneta

View All →

appneta tcpreplay send_packets.c calc_sleep_time divide by zero

appneta tcpreplay tcprewrite get.c get_l2len_protocol use after free

appneta tcpreplay tcprewrite edit_packet.c fix_ipv6_checksums use after free

appneta tcpreplay parse_args.c tcpedit_post_args null pointer dereference

appneta tcpreplay tcprewrite edit_packet.c untrunc_packet use after free

Affected Vendor

appneta

View all reports →

Affected Software

tcpreplay

Vulnerable Versions:

4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.4.4

Timeline

Official Publish: March 28th, 2024

Last Modified: August 1st, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1203 Exploitation for Client Execution

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1055 Process Injection

Defense Evasion