CVE-2025-51006

Katalog CVE

CVSS 7.8 · High EPSS 0,19%

Kerentanan Double Free pada broadcom tcpreplay. Skor CVSS 3.1 7.8 (High) menurut CISA ADP.

Deskripsi (NVD)

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dlt_linuxsll2_cleanup() function in plugins/dlt_linuxsll2/linuxsll2.c. This vulnerability is triggered when tcpedit_dlt_cleanup() indirectly invokes the cleanup routine multiple times on the same memory region. By supplying a specifically crafted pcap file to the tcprewrite binary, a local attacker can exploit this flaw to cause a Denial of Service (DoS) via memory corruption.

Rincian

Terbit di NVD

22 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-415: Double Free

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 7,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/appneta/tcpreplay/issues/926 exploit · issue tracking · patch
• https://github.com/sy460129/CVE-2025-51006 exploit · advisory pihak ketiga