CVE-2019-8376: Broadcom Tcpreplay

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Affected products

• Broadcom Tcpreplay: version 4.3.1 only
• Fedoraproject Fedora: version 28 only; version 29 only; version 30 only

Published 2019-02-17. Last modified 2026-06-17.