CVE-2018-17582

Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The get_next_packet() function in the send_packets.c file uses the memcpy() function unsafely to copy sequences from the source buffer pktdata to the destination (*prev_packet)->pktdata. This will result in a Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a file.

• CWE-125

• https://github.com/SegfaultMasters/covering360/blob/master/tcpreplayExploit, Third Party Advisory
• https://github.com/appneta/tcpreplay/issues/484Exploit, Patch, Third Party Advisory
• https://github.com/SegfaultMasters/covering360/blob/master/tcpreplayExploit, Third Party Advisory
• https://github.com/appneta/tcpreplay/issues/484Exploit, Patch, Third Party Advisory

Published

Sep 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17573The Wp-Insert plugin through 2.4.2 for WordPress allows uplo…
• CVE-2018-17574An issue was discovered in YMFE YApi 1.3.23. There is stored…
• CVE-2018-17575SWA SWA.JACAD 3.1.37 Build 024 has SQL Injection via the /ac…
• CVE-2018-1758IBM Rational Collaborative Lifecycle Management 6.0 through …5.4
• CVE-2018-17580A heap-based buffer over-read exists in the function fast_ed…
• CVE-2018-17581CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 …6.5
• CVE-2018-17583The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS vi…
• CVE-2018-17584The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF v…
• CVE-2018-17585The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS vi…
• CVE-2018-17586The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS vi…
• CVE-2018-17587AirTies Air 5750 devices with software 1.0.0.18 have XSS via…
• CVE-2018-17588AirTies Air 5021 devices with software 1.0.0.18 have XSS via…