What’s Vulnerable › Vulnerabilities

CVE-2024-3024: appneta tcpreplay get.c get_layer4_v6 heap-based overflow

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-03-28 · updated 2026-06-17
• Weakness: CWE-122

Description

A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function get_layer4_v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-258333 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

• appneta tcpreplay: before 4.4.4 — fixed in 4.4.4

How to fix

Upgrade to a fixed version: appneta tcpreplay 4.4.4. Check the vendor advisory for mitigations.

References

• https://docs.google.com/document/d/1wCIrViAJwGsO5afPBLLjRhO5RClsoUo3J9q1psLs84s/edit?usp=sharing
• https://drive.google.com/file/d/1zV9MSkfYLIrdtK3yczy1qbsJr_yN2fwH/view
• https://vuldb.com/?ctiid.258333
• https://vuldb.com/?id.258333
• https://vuldb.com/?submit.297866
• https://docs.google.com/document/d/1wCIrViAJwGsO5afPBLLjRhO5RClsoUo3J9q1psLs84s/edit?usp=sharing
• https://drive.google.com/file/d/1zV9MSkfYLIrdtK3yczy1qbsJr_yN2fwH/view
• https://vuldb.com/?ctiid.258333
• https://vuldb.com/?id.258333
• https://vuldb.com/?submit.297866

Get alerted when CVE-2024-3024 or the next vulnerability affects your stack