Medium severity · published Aug 19, 2025
CVE-2025-9157
appneta tcpreplay tcprewrite edit_packet.c untrunc_packet use after free
5.3
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability was determined in appneta tcpreplay up to 4.5.2-beta2. The impacted element is the function untrunc_packet of the file src/tcpedit/edit_packet.c of the component tcprewrite. Executing manipulation can lead to use after free. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. This patch is called 73008f261f1cdf7a1087dc8759115242696d35da. Applying a patch is advised to resolve this issue.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
tcpreplay · appneta
4.5.2-beta1; 4.5.2-beta2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-9157
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-9157
drive.google.com
https://drive.google.com/file/d/1_aONM_TOF96JbnYviPyZhVk-7HObtX8H/view?usp=sharing
github.com
https://github.com/appneta/tcpreplay/commit/73008f261f1cdf7a1087dc8759115242696d35da
github.com
https://github.com/appneta/tcpreplay/issues/970
github.com
https://github.com/appneta/tcpreplay/issues/970#issuecomment-3198966053
vuldb.com
https://vuldb.com/?ctiid.320537
vuldb.com
https://vuldb.com/?id.320537
More from tcpreplay
5.5
CVE-2025-9649
appneta tcpreplay send_packets.c calc_sleep_time divide by zero
5.5
CVE-2025-9386
appneta tcpreplay tcprewrite get.c get_l2len_protocol use after free
5.5
CVE-2025-9385
appneta tcpreplay tcprewrite edit_packet.c fix_ipv6_checksums use after free
5.5
CVE-2025-9384
appneta tcpreplay parse_args.c tcpedit_post_args null pointer dereference