CVE-2025-9019

Description

A vulnerability has been found in tcpreplay 4.5.1. This vulnerability affects the function mask_cidr6 of the file cidr.c of the component tcpprep. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The researcher is able to reproduce this with the latest official release 4.5.1 and the current master branch. The code maintainer cannot reproduce this for 4.5.2-beta1. In his reply the maintainer explains that "[i]n that case, this is a duplicate that was fixed in 4.5.2."

CVSS v3.1 Score

3.1

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Weakness Type (CWE)

CWE-119 Buffer Overflow

CWE-122 CWE-122

CWE-787 Out-of-bounds Write

Affected Products

Vendor	Product	Versions
broadcom	tcpreplay	All

References

Advisories & Patches

https://github.com/appneta/tcpreplay/issues/958 https://github.com/appneta/tcpreplay/issues/958#issuecomment-3124876035 https://github.com/appneta/tcpreplay/issues/959 https://github.com/appneta/tcpreplay/issues/958 https://github.com/appneta/tcpreplay/issues/959

Exploits

https://drive.google.com/file/d/13SQYVIb_YQoRfaJaaLf6iLtMiCRCHlBc/view?usp=sharing https://github.com/appneta/tcpreplay/issues/958 https://github.com/appneta/tcpreplay/issues/958#issuecomment-3124876035 https://github.com/appneta/tcpreplay/issues/959 https://vuldb.com/?submit.623635 https://vuldb.com/?submit.623636 https://vuldb.com/?submit.623637 https://vuldb.com/?submit.623638 https://vuldb.com/?submit.623639 https://github.com/appneta/tcpreplay/issues/958 https://github.com/appneta/tcpreplay/issues/959 https://vuldb.com/?submit.623639

Other References

https://vuldb.com/?ctiid.320080 https://vuldb.com/?id.320080

Frequently Asked Questions

What is CVE-2025-9019? +

A vulnerability has been found in tcpreplay 4.5.1. This vulnerability affects the function mask_cidr6 of the file cidr.c of the component tcpprep. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The researcher is able to reproduce this with the latest official release 4.5.1 and the current master branch. The code maintainer cannot reproduce this for 4.5.2-beta1. In his reply the maintainer explains that "[i]n that case, this is a duplicate that was fixed in 4.5.2." It has a CVSS v3.1 base score of 3.1 (LOW).

How severe is CVE-2025-9019? +

CVE-2025-9019 has a CVSS v3.1 score of 3.1 out of 10, rated LOW. This is a low-severity vulnerability with limited impact.

What products are affected by CVE-2025-9019? +

CVE-2025-9019 affects products from broadcom, specifically: tcpreplay. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-9019? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-11139

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow local attackers to …

CVE-2025-1866

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading …

CVE-2025-2401

Buffer overflow vulnerability in Immunity Debugger affecting version 1.85, its exploitation could allow a local attacker to execute arbitrary code, …

CVE-2025-46333

z2d is a pure Zig 2D graphics library. Versions of z2d after `0.5.1` and up to and including `0.6.0`, when …

CVE-2025-6151

A vulnerability has been found in TP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknown functionality …

CVE-2025-34096

A stack-based buffer overflow vulnerability exists in Easy File Sharing HTTP Server version 7.2. The flaw is triggered when a …