Vulnerabilities > CVE-2023-4256 - Double Free vulnerability in multiple products

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
broadcom
fedoraproject
CWE-415
NVD
Published: 2023-12-21
Updated: 2024-03-24

Summary

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This flaw enables a local attacker to initiate a Denial of Service (DoS) attack.

Vulnerable Configurations

Part Description Count
Application
Broadcom
2
Application
Fedoraproject
1
OS
Fedoraproject
1

Common Weakness Enumeration (CWE)

References