CVE-2024-3024

A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function get_layer4_v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-258333 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-122
• CWE-787

• https://docs.google.com/document/d/1wCIrViAJwGsO5afPBLLjRhO5RClsoUo3J9q1psLs84s/edit?usp=sharingExploit
• https://drive.google.com/file/d/1zV9MSkfYLIrdtK3yczy1qbsJr_yN2fwH/viewPermissions Required
• https://vuldb.com/?ctiid.258333Permissions Required, VDB Entry
• https://vuldb.com/?id.258333Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.297866Third Party Advisory, VDB Entry
• https://docs.google.com/document/d/1wCIrViAJwGsO5afPBLLjRhO5RClsoUo3J9q1psLs84s/edit?usp=sharingExploit
• https://drive.google.com/file/d/1zV9MSkfYLIrdtK3yczy1qbsJr_yN2fwH/viewPermissions Required
• https://vuldb.com/?ctiid.258333Permissions Required, VDB Entry
• https://vuldb.com/?id.258333Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.297866Third Party Advisory, VDB Entry

Published

Mar 28, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-30234Missing Authorization vulnerability in Wholesale Team Wholes…8.8
• CVE-2024-30235Missing Authorization vulnerability in Themeisle Multiple Pa…8.8
• CVE-2024-30236Improper Neutralization of Special Elements used in an SQL C…9.9
• CVE-2024-30237Improper Neutralization of Special Elements used in an SQL C…7.6
• CVE-2024-30238Improper Neutralization of Special Elements used in an SQL C…8.8
• CVE-2024-30239Improper Neutralization of Special Elements used in an SQL C…8.5
• CVE-2024-30240Improper Neutralization of Special Elements used in an SQL C…8.5
• CVE-2024-30241Improper Neutralization of Special Elements used in an SQL C…8.8
• CVE-2024-30242Improper Neutralization of Special Elements used in an SQL C…8.5
• CVE-2024-30243Improper Neutralization of Special Elements used in an SQL C…8.5
• CVE-2024-30244Improper Neutralization of Special Elements used in an SQL C…8.8
• CVE-2024-30245Improper Neutralization of Special Elements used in an SQL C…7.6