Vulnerabilities > CVE-2024-3024 - Out-of-bounds Write vulnerability in Broadcom Tcpreplay

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

broadcom

CWE-787

NVD

Published: 2024-03-28

Updated: 2025-04-16

Summary

A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function get_layer4_v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-258333 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerable Configurations

Part	Description	Count
Application	Broadcom Broadcom Tcpreplay 1.0.1 Broadcom Tcpreplay 1.1 Broadcom Tcpreplay 1.2 Broadcom Tcpreplay 1.3 Broadcom Tcpreplay 1.3.0 Broadcom Tcpreplay 1.3.1 Broadcom Tcpreplay 1.3.2 Broadcom Tcpreplay 1.3.3 Broadcom Tcpreplay 1.4 Broadcom Tcpreplay 1.4.0 Broadcom Tcpreplay 1.4.1 Broadcom Tcpreplay 1.4.2 Broadcom Tcpreplay 1.4.3 Broadcom Tcpreplay 1.4.4 Broadcom Tcpreplay 1.4.5 Broadcom Tcpreplay 1.4.6 Broadcom Tcpreplay 2.0.0 Broadcom Tcpreplay 2.0.1 Broadcom Tcpreplay 2.0.2 Broadcom Tcpreplay 2.0.3 Broadcom Tcpreplay 2.1.0 Broadcom Tcpreplay 2.1.1 Broadcom Tcpreplay 2.2.0 Broadcom Tcpreplay 2.2.1 Broadcom Tcpreplay 2.2.2 Broadcom Tcpreplay 2.3.0 Broadcom Tcpreplay 2.3.1 Broadcom Tcpreplay 2.3.2 Broadcom Tcpreplay 2.3.3 Broadcom Tcpreplay 2.3.4 Broadcom Tcpreplay 2.3.5 Broadcom Tcpreplay 3.0 Broadcom Tcpreplay 3.0.0 Broadcom Tcpreplay 3.0.1 Broadcom Tcpreplay 3.0Rc1 Broadcom Tcpreplay 3.1.0 Broadcom Tcpreplay 3.1.1 Broadcom Tcpreplay 3.2 Broadcom Tcpreplay 3.2.1 Broadcom Tcpreplay 3.2.2 Broadcom Tcpreplay 3.2.3 Broadcom Tcpreplay 3.2.4 Broadcom Tcpreplay 3.2.5 Broadcom Tcpreplay 3.3.0 Broadcom Tcpreplay 3.3.1 Broadcom Tcpreplay 3.3.2 Broadcom Tcpreplay 3.4.0 Broadcom Tcpreplay 3.4.1 Broadcom Tcpreplay 3.4.2 Broadcom Tcpreplay 3.4.3 Broadcom Tcpreplay 3.4.4 Broadcom Tcpreplay 4.0.0 Broadcom Tcpreplay 4.0.1 Broadcom Tcpreplay 4.0.2 Broadcom Tcpreplay 4.0.3 Broadcom Tcpreplay 4.0.4 Broadcom Tcpreplay 4.0.5 Broadcom Tcpreplay 4.1.0 Broadcom Tcpreplay 4.1.1 Broadcom Tcpreplay 4.1.2 Broadcom Tcpreplay 4.2.0 Broadcom Tcpreplay 4.2.1 Broadcom Tcpreplay 4.2.2 Broadcom Tcpreplay 4.2.3 Broadcom Tcpreplay 4.2.4 Broadcom Tcpreplay 4.2.5 Broadcom Tcpreplay 4.2.6 Broadcom Tcpreplay 4.3.0 Broadcom Tcpreplay 4.3.1 Broadcom Tcpreplay 4.3.2 Broadcom Tcpreplay 4.3.3 Broadcom Tcpreplay 4.3.4 Broadcom Tcpreplay 4.4.1 Broadcom Tcpreplay 4.4.3	112

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References