cve/2018/CVE-2018-13112.md

CVE-2018-13112

Description

get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packets, as demonstrated by tcpprep.

POC

Reference

• https://github.com/appneta/tcpreplay/issues/477
• https://github.com/appneta/tcpreplay/issues/477

Github

• https://github.com/Edward-L/my-cve-list