{"id":"CVE-2022-28487","aliases":["DEBIAN-CVE-2022-28487","EUVD-2022-32929","GHSA-g42m-vjq2-x6h8","MGASA-2022-0345","UBUNTU-CVE-2022-28487","USN-5205-1"],"status":"published","title":"Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The...","description":"Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02006,"percentile":0.8096,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401"],"published":"2022-05-04T00:00:00Z","modified":"2026-11-03T06:02:29Z","fixes":[{"ecosystem":"Debian:12","package":"tcpreplay","fixed_in":["4.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tcpreplay","fixed_in":["4.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tcpreplay","fixed_in":["4.4.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"tcpreplay","fixed_in":["4.2.6-1ubuntu0.1~esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"tcpreplay","fixed_in":["4.3.2-1ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"tcpreplay","fixed_in":["4.3.4-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"tcpreplay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tcpreplay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tcpreplay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"tcpreplay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-1.mga8"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tcpreplay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4.4-2","3.4.4-2+deb8u1build0.16.04.1","3.4.4-2+deb8u1ubuntu0.1~esm1","3.4.4-2+deb8u1ubuntu0.1~esm2","3.4.4-2+deb8u1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"tcpreplay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6-1ubuntu0.1~esm4"}]}],"versions":["4.2.6-1","4.2.6-1ubuntu0.1~esm1","4.2.6-1ubuntu0.1~esm2","4.2.6-1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"tcpreplay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.2-1ubuntu0.1~esm2"}]}],"versions":["4.3.2-1build1","4.3.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"tcpreplay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.4-1ubuntu0.1~esm1"}]}],"versions":["4.3.3-2","4.3.4-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tcpreplay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-2+deb8u1ubuntu0.1~esm2"}]}],"versions":["3.4.4-2","3.4.4-2+deb8u1build0.16.04.1","3.4.4-2+deb8u1ubuntu0.1~esm1"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"tcpreplay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6-1ubuntu0.1~esm4"}]}],"versions":["4.2.6-1","4.2.6-1ubuntu0.1~esm1","4.2.6-1ubuntu0.1~esm2","4.2.6-1ubuntu0.1~esm3"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"tcpreplay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.2-1ubuntu0.1~esm2"}]}],"versions":["4.3.2-1build1","4.3.2-1ubuntu0.1~esm1"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"tcpreplay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.4-1ubuntu0.1~esm1"}]}],"versions":["4.3.3-2","4.3.4-1"],"bundled":13}],"products":[{"vendor":"broadcom","product":"tcpreplay"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://github.com/appneta/tcpreplay/issues/723","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/appneta/tcpreplay/pull/720","tags":["x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202210-08","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28487","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/"},{"url":"https://github.com/advisories/GHSA-g42m-vjq2-x6h8"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/28xxx/CVE-2022-28487.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-28487","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0345.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30822","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-28487","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28487","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5205-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-13112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17974","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20553","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-12740","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-24265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-24266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-27416","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-28487","description":"Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2022-05-04T00:00:00Z","modified":"2024-08-03T05:56:15.122Z","updated_at":"2026-11-02T14:34:39.233406Z"}],"euvd":[{"id":"EUVD-2022-32929","description":"Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2022-05-04T00:00:00Z","modified":"2024-08-03T05:56:15Z","updated_at":"2026-11-03T03:25:40.388857Z"}],"ghsa":[{"id":"GHSA-g42m-vjq2-x6h8","title":"Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The...","description":"Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2022-05-05T00:00:19Z","modified":"2023-01-30T05:04:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:47:05.929455Z"}],"nvd":[{"id":"CVE-2022-28487","description":"Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2022-05-04T15:15:12.863Z","modified":"2026-06-17T04:38:35.383Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:07:18.660414Z"}],"osv":[{"id":"UBUNTU-CVE-2022-28487","description":"Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2022-05-04T15:15:00Z","modified":"2025-10-24T04:53:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"CVE-2022-28487","description":"Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2022-05-04T00:00:00Z","modified":"2026-10-28T02:30:56.030345941Z","updated_at":"2026-11-02T15:44:25.164673Z"},{"id":"DEBIAN-CVE-2022-28487","description":"Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2022-05-04T15:15:12.863Z","modified":"2026-11-03T06:02:29.761813223Z","updated_at":"2026-11-03T06:44:05.456691Z"},{"id":"MGASA-2022-0345","title":"Updated tcpreplay packages fix security vulnerability","description":"tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6\nin common/get.c. (CVE-2022-27939)\n\ntcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in\nget_ipv6_next in common/get.c. (CVE-2022-27940)\n\ntcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in\nget_l2len_protocol in common/get.c. (CVE-2022-27941)\n\ntcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls\nin common/get.c. (CVE-2022-27942)\n\nTcpreplay version 4.4.1 contains a memory leakage flaw in\nfix_ipv6_checksums() function. The highest threat from this vulnerability\nis to data confidentiality. (CVE-2022-28487)\n\nThe component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a\nheap-based buffer overflow in get_ipv6_next at common/get.c:713.\n(CVE-2022-37047)\n\nThe component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a\nheap-based buffer overflow in get_l2len_protocol at common/get.c:344.\n(CVE-2022-37048)\n\nThe component tcpprep in Tcpreplay v4.4.1 was discovered to contain a\nheap-based buffer overflow in parse_mpls at common/get.c:150.\n(CVE-2022-37049)\n","status":"published","published":"2022-09-26T06:22:36Z","modified":"2026-04-16T04:41:35.777539505Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"USN-5205-1","title":"tcpreplay vulnerabilities","description":"It was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input when processed by tcpprep. An attacker could possibly use\nthis issue to cause a denial of service. This issue only affected\nUbuntu 18.04 ESM. (CVE-2018-13112)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input. An attacker could possibly use this issue to cause a denial\nof service or expose sensitive information. This issue only affected\nUbuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-17580, CVE-2018-17582)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input. An attacker could possibly use this issue to cause a denial\nof service. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM.\n(CVE-2018-17974, CVE-2018-18407)\n\nIt was discovered that a use-after-free existed in Tcpreplay in the tcpbridge\nbinary. An attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-18408)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input. An attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 ESM\nand Ubuntu 20.04 ESM. (CVE-2018-20552, CVE-2018-20553)\n\nIt was discovered that a heap-based buffer over-read that existed in Tcpreplay\ncaused an application crash when tcprewrite or tcpreplay-edit received specially\ncrafted packet capture input. An attacker could possibly use this to cause a\ndenial of service or to expose sensitive information. This issue only affected\nUbuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-12740)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input when processed by tcpprep. An attacker could possibly use\nthis issue to cause a denial of service. This issue only affected\nUbuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-24265, CVE-2020-24266)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input when processed by tcprewrite. An attacker could possibly\nuse this issue to cause a denial of service. This issue only affected Ubuntu\n22.04 ESM. (CVE-2022-27416)\n\nIt was discovered that Tcpreplay did not properly manage memory under certain\ncircumstances. If a user were tricked into opening a specially crafted packet\ncapture file, a remote attacker could possibly use this issue to cause\nTcpreplay crash, resulting in a denial of service, or possibly read sensitive\ndata. This issue only affected Ubuntu 18.04 ESM, Ubuntu 20.04 ESM and Ubuntu\n22.04 ESM. (CVE-2022-28487)\n","status":"published","published":"2022-10-04T11:15:02Z","modified":"2026-06-25T13:30:54.441262451Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}