CVE-2018-13112: Broadcom Tcpreplay

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packets, as demonstrated by tcpprep.

Affected products

• Broadcom Tcpreplay: version 4.3.0 only

Published 2018-07-03. Last modified 2026-06-17.