Tcpreplay Infinite Loop Vulnerability in Tcprewrite Function

A denial-of-service vulnerability has been identified in Tcpreplay version 4.4.4. The issue arises from an infinite loop in the Tcprewrite function within get.c. This loop can be exploited by crafting a malicious pcap input file, causing the program to run indefinitely without termination.

Impact

Exploitation of this vulnerability leads to an infinite loop, causing the program to hang and consume resources without completing its task.

Reproduction

The vulnerability can be reproduced by compiling Tcpreplay with Clang and AddressSanitizer enabled, then running the Tcprewrite tool with a specially crafted pcap file that triggers the infinite loop.

Remediation

Users can update to Tcpreplay version 4.5, where this issue has been fixed.