Tcpreplay: Multiple vulnerabilities Multiple vulnerabilities have been found in Tcpreplay, the worst of which could result in a Denial of Service condition. tcpreplay 2021-05-26 2021-05-26 750344 local 4.3.4 4.3.4

Tcpreplay is a suite of utilities for UNIX systems for editing and replaying network traffic which was previously captured by tools like tcpdump and ethereal/wireshark.

Multiple vulnerabilities have been discovered in Tcpreplay. Please review the CVE identifiers referenced below for details.

A remote attacker could entice a user to open a specially crafted network capture file using Tcpreplay, possibly resulting in a Denial of Service condition.

There is no known workaround at this time.

All Tcpreplay users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/tcpreplay-4.3.4"
CVE-2020-24265 CVE-2020-24266 whissi whissi