Tcpreplay
51 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Tcpreplay, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
Tcpreplay CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 1 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 6 |
| 2025-09 | 2 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 51 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical2
- High32
- Medium14
- Low3
Latest CVEs
The 15 most recently published vulnerabilities affecting Tcpreplay.
- CVE-2025-51005A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the program incorrectly handles memory in the checksum calculat...7.5
- CVE-2025-51006Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dlt_linuxsll2_cleanup() function in plugins/dlt_linuxsll2/linuxsll2.c. This vulnerability is triggered when tcp...7.8
- CVE-2025-9649appneta tcpreplay send_packets.c calc_sleep_time divide by zero3.3
- CVE-2025-9386appneta tcpreplay tcprewrite get.c get_l2len_protocol use after free5.3
- CVE-2025-9385appneta tcpreplay tcprewrite edit_packet.c fix_ipv6_checksums use after free5.3
- CVE-2025-9384appneta tcpreplay parse_args.c tcpedit_post_args null pointer dereference3.3
- CVE-2025-9157appneta tcpreplay tcprewrite edit_packet.c untrunc_packet use after free5.3
- CVE-2025-9019tcpreplay tcpprep cidr.c mask_cidr6 heap-based overflow3.1
- CVE-2024-22654tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c.7.5
- CVE-2024-3024appneta tcpreplay get.c get_layer4_v6 heap-based overflow5.3
- CVE-2023-43279Null Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to crash the application via crafted tcprewrite command.6.5
- CVE-2023-4256Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c5.5
- CVE-2023-27788An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint.7.5
- CVE-2023-27789An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint.7.5
- CVE-2023-27786An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.7.5
Product grouping is registry-driven, with AI assist and human review. How it works