Every CVE Search/ Get API key

CVE-2023-27785

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service...

7.5 HighFix available

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.47%Up 1.4 points since Mar 17, 2023
90%50%10%1%

What each source reports

NVD Score used 7.5

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.

Record
CVE-2023-27785
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
CVE List 7.5

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.

Record
CVE-2023-27785
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2023-31521 7.5

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.

Record
EUVD-2023-31521
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-jpvj-j5ph-xp9w 7.5

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service...

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.

Record
GHSA-jpvj-j5ph-xp9w
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSV 7.5

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.

Record
CVE-2023-27785
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-27785 7.5

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.

Record
DEBIAN-CVE-2023-27785
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-27785 7.5

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.

Record
UBUNTU-CVE-2023-27785
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2023-0188 No score

Updated tcpreplay packages fix security vulnerability

An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c. (CVE-2023-27783)

An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint. (CVE-2023-27784)

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function. (CVE-2023-27785)

An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function. (CVE-2023-27786)

An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint. (CVE-2023-27787)

An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint. (CVE-2023-27788)

An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint. (CVE-2023-27789)

Record
MGASA-2023-0188
Updated
2026-11-02
OSVUSN-7231-1 No score

tcpreplay vulnerabilities

It was discovered that Tcpreplay incorrectly handled memory when using the tcprewrite utility. A remote attacker could possibly use this issue to cause Tcpreplay to crash, resulting in a denial of service. (CVE-2023-27783)

It was discovered that Tcpreplay incorrectly validated external input. A remote attacker could possibly use this issue to cause Tcpreplay to crash, resulting in a denial of service. (CVE-2023-27784, CVE-2023-27785, CVE-2023-27786, CVE-2023-27787, CVE-2023-27788, CVE-2023-27789)

It was discovered that Tcpreplay incorrectly handled memory when using the tcprewrite utility. An attacker could possibly use this issue to cause Tcpreplay to crash, resulting in a denial of service. (CVE-2023-4256, CVE-2023-43279)

Record
USN-7231-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tcpreplay
Debian:12
All versions, plus listed versions
4.4.3-14.4.4-14.5.1-14.5.2-14.5.3-14.5.4-1
None known
tcpreplay
Debian:13
before 4.4.4-1
4.4.4-1
tcpreplay
Debian:14
before 4.4.4-1
4.4.4-1
tcpreplay
Mageia:8
From an advisory covering 7 CVEs
before 4.4.2-1.1.mga8
4.4.2-1.1.mga8
tcpreplay
Ubuntu:Pro:16.04:LTS
before 3.4.4-2+deb8u1ubuntu0.1~esm3, plus listed versions
3.4.4-23.4.4-2+deb8u1build0.16.04.13.4.4-2+deb8u1ubuntu0.1~esm13.4.4-2+deb8u1ubuntu0.1~esm2
3.4.4-2+deb8u1ubuntu0.1~esm3
tcpreplay
Ubuntu:Pro:18.04:LTS
before 4.2.6-1ubuntu0.1~esm5, plus listed versions
4.2.6-14.2.6-1ubuntu0.1~esm14.2.6-1ubuntu0.1~esm24.2.6-1ubuntu0.1~esm34.2.6-1ubuntu0.1~esm4
4.2.6-1ubuntu0.1~esm5
tcpreplay
Ubuntu:Pro:20.04:LTS
before 4.3.2-1ubuntu0.1~esm3, plus listed versions
4.3.2-1build14.3.2-1ubuntu0.1~esm14.3.2-1ubuntu0.1~esm2
4.3.2-1ubuntu0.1~esm3
tcpreplay
Ubuntu:Pro:22.04:LTS
before 4.3.4-1ubuntu0.1~esm2, plus listed versions
4.3.3-24.3.4-14.3.4-1ubuntu0.1~esm1
4.3.4-1ubuntu0.1~esm2
tcpreplay
Ubuntu:Pro:16.04:LTS
From an advisory covering 9 CVEs
before 3.4.4-2+deb8u1ubuntu0.1~esm3, plus listed versions
3.4.4-23.4.4-2+deb8u1build0.16.04.13.4.4-2+deb8u1ubuntu0.1~esm13.4.4-2+deb8u1ubuntu0.1~esm2
3.4.4-2+deb8u1ubuntu0.1~esm3
tcpreplay
Ubuntu:Pro:18.04:LTS
From an advisory covering 9 CVEs
before 4.2.6-1ubuntu0.1~esm5, plus listed versions
4.2.6-14.2.6-1ubuntu0.1~esm14.2.6-1ubuntu0.1~esm24.2.6-1ubuntu0.1~esm34.2.6-1ubuntu0.1~esm4
4.2.6-1ubuntu0.1~esm5
tcpreplay
Ubuntu:Pro:20.04:LTS
From an advisory covering 9 CVEs
before 4.3.2-1ubuntu0.1~esm3, plus listed versions
4.3.2-1build14.3.2-1ubuntu0.1~esm14.3.2-1ubuntu0.1~esm2
4.3.2-1ubuntu0.1~esm3
tcpreplay
Ubuntu:Pro:22.04:LTS
From an advisory covering 9 CVEs
before 4.3.4-1ubuntu0.1~esm2, plus listed versions
4.3.3-24.3.4-14.3.4-1ubuntu0.1~esm1
4.3.4-1ubuntu0.1~esm2
tcpreplay
Ubuntu:Pro:24.04:LTS
From an advisory covering 9 CVEs
before 4.4.4-1ubuntu0.1~esm1, plus listed versions
4.4.3-14.4.4-14.4.4-1build14.4.4-1build2
4.4.4-1ubuntu0.1~esm1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-27785 is a high vulnerability (CVSS 7.5) in Broadcom Tcpreplay, published March 16, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. Fixed in tcpreplay 4.4.4-1.

References

Show 19 moreShow less
MoveEnter Open