CVE-2018-17580

A heap-based buffer over-read exists in the function fast_edit_packet() in the file send_packets.c of Tcpreplay v4.3.0 beta1. This can lead to Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a crafted pcap file.

• CWE-125

• https://github.com/SegfaultMasters/covering360/blob/master/tcpreplayExploit, Third Party Advisory
• https://github.com/appneta/tcpreplay/issues/485Exploit, Patch, Third Party Advisory
• https://github.com/SegfaultMasters/covering360/blob/master/tcpreplayExploit, Third Party Advisory
• https://github.com/appneta/tcpreplay/issues/485Exploit, Patch, Third Party Advisory

Published

Sep 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17571Vanilla before 2.6.1 allows XSS via the email field of a pro…
• CVE-2018-17572InfluxDB 0.9.5 has Reflected XSS in the Write Data module.4.8
• CVE-2018-17573The Wp-Insert plugin through 2.4.2 for WordPress allows uplo…
• CVE-2018-17574An issue was discovered in YMFE YApi 1.3.23. There is stored…
• CVE-2018-17575SWA SWA.JACAD 3.1.37 Build 024 has SQL Injection via the /ac…
• CVE-2018-1758IBM Rational Collaborative Lifecycle Management 6.0 through …5.4
• CVE-2018-17581CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 …6.5
• CVE-2018-17582Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-rea…
• CVE-2018-17583The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS vi…
• CVE-2018-17584The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF v…
• CVE-2018-17585The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS vi…
• CVE-2018-17586The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS vi…