Appneta Tcpreplay Heap Buffer Overflow Vulnerability in Tcpliveplay Utility

A heap buffer overflow vulnerability has been identified in the tcpliveplay utility of Appneta Tcpreplay version 4.5.1. This vulnerability arises when the program processes crafted pcap files, particularly in the checksum calculation logic. The improper handling of packet lengths derived from the IPv4 header allows for memory access beyond the allocated buffer, potentially leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a heap buffer overflow, which can lead to memory corruption and potentially allow for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by building Tcpreplay 4.5.1 with AddressSanitizer enabled, and then running the tcpliveplay utility with a crafted pcap file that exploits the buffer overflow in the checksum calculation.

Remediation

The vulnerability is expected to be addressed in Tcpreplay version 4.6, when the tcpliveplay utility is removed.