Logo
vulnerabilityCVE-2025-9385
Name
CVE-2025-9385
Source
NVD ( link)Debian ( link)
Description
A flaw has been found in appneta tcpreplay up to 4.5.1. The affected element is the function fix_ipv6_checksums of the file edit_packet.c of the component tcprewrite. This manipulation causes use after free. The attack is restricted to local execution. The exploit has been published and may be used. Upgrading to version 4.5.2-beta3 is sufficient to fix this issue. It is advisable to upgrade the affected component.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
tcpreplay
Exploitable

Vulnerability Ratings#


1.9
CVSSv4
5.3
CVSSv31
5.5
CVSSv31
4.3
CVSSv2
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
4.5.2
Not Affected
buildroot
master
4.5.2
Not Affected
openwrt
master
4.5.2-r4
Not Affected
openwrt
openwrt-25.12
4.5.2-r2
Not Affected
yocto
master
4.5.2
Not Affected
yocto
scarthgap
4.4.4
Exploitable