CVE-2023-4256

Summary

CVE-2023-4256 is a newly identified vulnerability affecting the tcprewrite component of tcpreplay. The issue lies within the tcpedit_dlt_cleanup() function in plugins/dlt_plugins.c, where a double free condition has been found. An attacker can exploit this vulnerability by supplying a specially crafted file to the tcprewrite binary. Successful exploitation could result in a Denial of Service (DoS) attack.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.