tcpreplay tcprewrite IPv4 Checksums Use-After-Free Vulnerability Analysis

Critical Vulnerability Information Vulnerability Title tcpreplay tcprewrite tcpreplay version 6fcbf03 (the newest master in https://github.com/appneta/tcpreplay) Use-After-Free Vulnerability Description TCPPREWRITE IPv4 Checksums Use-After-Free Vulnerability in fix_ipv4_checksums Function Summary A critical use-after-free vulnerability exists in the tcprewrite utility within the tcpreplay package. The vulnerability occurs in the function in at line 69, triggered when memory is reallocated after packet data processing. This specific vulnerability affects IPv4 packet checksum calculation and leads to heap use-after-free memory access, resulting in program termination with a SIGABRT. Technical Details Vulnerability Type: Heap Use-After-Free Affected Function: Source File: Line Number: 69:17 Signal: SIGABRT (06) Vulnerability Mechanism and Root Cause This use-after-free vulnerability is specific to packet editing operations during IPv4 checksum calculation. The vulnerability occurs when the function attempts to access packet memory that has been reallocated by the function, but continues to use the original, unreleased memory pointer. Vulnerability Sequence 1. The function initializes packet editing at . 2. During packet processing, is called (located at ), which uses to resize the packet buffer.

Goal Reached Thanks to every supporter — we hit 100%!

tcpreplay tcprewrite IPv4 Checksums Use-After-Free Vulnerability Analysis