Log in Start free

Vulnerability · Published Aug 24, 2025 · Assigned by VulDB

CVE-2025-9386appneta tcpreplay tcprewrite get.c get_l2len_protocol use after free

Medium 5.3

In plain English

A medium-severity use-after-free in tcpreplay from appneta. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 83.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function get_l2len_protocol of the file get.c of the component tcprewrite. Such manipulation leads to use after free. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Upgrading to version 4.5.2-beta3 is sufficient to resolve this issue. You should upgrade the affected component.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12tcpreplayno fix listedDEBIAN-CVE-2025-9386
Debian:13tcpreplayno fix listedDEBIAN-CVE-2025-9386
Debian:14tcpreplay4.5.2-1DEBIAN-CVE-2025-9386
Ubuntu:25.10tcpreplayno fix listedUBUNTU-CVE-2025-9386
Ubuntu:26.04:LTStcpreplayno fix listedUBUNTU-CVE-2025-9386
Ubuntu:26.10tcpreplayno fix listedUBUNTU-CVE-2025-9386

Affected products (as reported)

VendorProductVersions
appneta tcpreplay 4.5.04.5.1

Weakness: CWE-416, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

References