Medium severity5.5OSV Advisory· Published Oct 17, 2018· Updated Jun 17, 2026
CVE-2018-18407
CVE-2018-18407
Description
A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The issue gets triggered in the function csum_replace4() in incremental_checksum.h, causing a denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- cpe:2.3:a:broadcom:tcpreplay:4.3.0:beta1:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- github.com/SegfaultMasters/covering360/blob/master/tcpreplay/README.mdnvdExploitThird Party Advisory
- github.com/appneta/tcpreplay/issues/488nvdExploitPatchThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4V3SADKXUSHWTVAPU3WLXBDEQUHRA6ZO/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MLPY6W7Z7G6PF2JN4LXXHCACYLD4RBG6/nvd
News mentions
0No linked articles in our index yet.