A security vulnerability has been detected in appneta tcpreplay 4.5.1. Impacted is the function calc_sleep_time of the file send_packets.c. Such manipulation leads to divide by zero. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 4.5.3-beta3 is recommended to address this issue. It is advisable to upgrade the affected component. The vendor confirms in a GitHub issue reply: "Was able to reproduce in 6fcbf03 but NOT 4.5.3-beta3."
References
| Link | Resource |
|---|---|
| https://drive.google.com/file/d/16QQtZvUrMbF-i_1cGt5hNWmkn-YVyBOM/view?usp=sharing | Exploit |
| https://github.com/appneta/tcpreplay/issues/968 | Exploit Issue Tracking Vendor Advisory |
| https://github.com/appneta/tcpreplay/issues/968#issuecomment-3226338070 | Issue Tracking |
| https://vuldb.com/?ctiid.321855 | Permissions Required VDB Entry |
| https://vuldb.com/?id.321855 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.630493 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.630494 | Third Party Advisory VDB Entry |
Configurations
History
09 Oct 2025, 19:19
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Broadcom tcpreplay
Broadcom |
|
| CPE | cpe:2.3:a:broadcom:tcpreplay:4.5.1:*:*:*:*:*:*:* | |
| References | () https://drive.google.com/file/d/16QQtZvUrMbF-i_1cGt5hNWmkn-YVyBOM/view?usp=sharing - Exploit | |
| References | () https://github.com/appneta/tcpreplay/issues/968 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://github.com/appneta/tcpreplay/issues/968#issuecomment-3226338070 - Issue Tracking | |
| References | () https://vuldb.com/?ctiid.321855 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.321855 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.630493 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.630494 - Third Party Advisory, VDB Entry |
29 Aug 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-29 14:15
Updated : 2025-10-09 19:19
NVD link : CVE-2025-9649
Mitre link : CVE-2025-9649
CVE.ORG link : CVE-2025-9649
JSON object : View
Products Affected
broadcom
- tcpreplay