CVE-2019-8381: Broadcom Tcpreplay

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Affected products

• Broadcom Tcpreplay: version 4.3.1 only
• Fedoraproject Fedora: version 28 only; version 29 only; version 30 only

Published 2019-02-17. Last modified 2026-06-17.