What’s Vulnerable › Vulnerabilities

CVE-2025-9385: appneta tcpreplay tcprewrite edit_packet.c fix_ipv6_checksums use after free

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-08-24 · updated 2026-06-17
• Weakness: CWE-119

Description

A flaw has been found in appneta tcpreplay up to 4.5.1. The affected element is the function fix_ipv6_checksums of the file edit_packet.c of the component tcprewrite. This manipulation causes use after free. The attack is restricted to local execution. The exploit has been published and may be used. Upgrading to version 4.5.2-beta3 is sufficient to fix this issue. It is advisable to upgrade the affected component.

Affected products

• appneta tcpreplay: through 4.5.1

References

• https://drive.google.com/file/d/1BQZF558bRHv07wtlCoZgtqTlEpHgfytp/view?usp=sharing
• https://github.com/appneta/tcpreplay/issues/972
• https://github.com/appneta/tcpreplay/issues/972#issuecomment-3199019278
• https://vuldb.com/?ctiid.321218
• https://vuldb.com/?id.321218
• https://vuldb.com/?submit.630497

Get alerted when CVE-2025-9385 or the next vulnerability affects your stack