Tcpreplay vulnerabilitiesRanked by how likely they are to be used.

Product76 versions
The short answer

Tcpreplay is made by Broadcom. We track 48 published vulnerabilities in it, across 76 versions. None of them is on the list of flaws known to be exploited today. If you run Tcpreplay, keep it on a version the vendor still supports.

See the riskiest flaws

We keep watching the known-exploited list.

Known exploited

Which Tcpreplay vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Tcpreplay's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Tcpreplay flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 3.6%

    tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160.

    CVSS7.8Published12 Sep 2017
  2. 2.5%

    Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an over-size packet.

    CVSS7.8Published15 Mar 2017
  3. 2.3%

    get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packets, as demonstrated by tcpprep.

    CVSS7.5Published3 Jul 2018
  4. 2.3%

    A use-after-free was discovered in the tcpbridge binary of Tcpreplay 4.3.0 beta1.

    CVSS9.8Published17 Oct 2018
  5. 2.2%

    An issue was discovered in tcpreplay tcpprep v4.3.3.

    CVSS7.5Published19 Oct 2020
  6. 2.2%

    An issue was discovered in tcpreplay tcpprep v4.3.3.

    CVSS7.5Published19 Oct 2020
  7. 2.1%

    tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service (segmentation fault) via a large frame, a related issue to CVE-2017-14266.

    CVSS7.5Published23 Jan 2017
  8. 2.0%

    Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function.

    CVSS7.5Published4 May 2022
  9. 1.7%

    tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a get_c operation.

    CVSS9.1Published8 May 2020
  10. 1.5%

    An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c.

    CVSS7.5Published16 Mar 2023
EdgeProtect

Running Tcpreplay? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 48 published vulnerabilities listed under the name Tcpreplay, across 76 versions.

None of Tcpreplay's vulnerabilities is on the list of flaws known to be exploited today.

Create a EdgeProtect account and track Tcpreplay. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.