Tcpreplay Denial-of-Service Vulnerability in Tcpedit Dlt Getplugin Function

A denial-of-service vulnerability has been identified in Tcpreplay version 4.5.1. The issue arises in the Tcpedit Dlt Getplugin function within the Dlt Utils source file, where a local attacker can cause a segmentation fault by using a crafted file. This vulnerability was introduced by improper handling of certain input, leading to invalid memory access.

Impact

Exploitation of this vulnerability causes a segmentation fault, leading to a crash of the Tcpreplay application.

Reproduction

The vulnerability can be reproduced by compiling Tcpreplay with the default configuration, then using the 'tcprewrite' tool with specific Ethernet MAC address options and a crafted input file that triggers the denial-of-service condition. The AddressSanitizer can be used to verify the segmentation fault caused by the vulnerability.

Remediation

Users can upgrade to Tcpreplay version 4.5.0-beta1 or later, where this vulnerability has been addressed.