Advisories » MGASA-2020-0278

Updated tcpreplay packages fix security vulnerability

Publication date: 05 Jul 2020
Modification date: 05 Jul 2020
Type: security
Affected Mageia releases : 7
CVE: CVE-2020-12740

Description

Updated tcpreplay package fixes security vulnerability:

tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read
during a get_c operation. The issue is being triggered in the function
get_ipv6_next()  at common/get.c (CVE-2020-12740).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=26885
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4YAT4AGTHQKB74ETOQPJMV67TSDIAPOC/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12740

SRPMS

7/core

• tcpreplay-4.3.3-1.mga7