CVE-2022-37049

HIGH 7.8CVE-2022-37049 · Published 18/08/2022 · updated 17/06/2026

In short

CVE-2022-37049 is a HIGH (CVSS 7.8) vulnerability affecting tcpreplay (broadcom).
Chance of exploitation in the next 30 days (EPSS): 0.42%, higher than 36.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tcpreplay broadcom	`= 4.4.1`	No fix yet

Description

The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is different from CVE-2022-27942.

References

appneta/tcpreplay · Exploit
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC
security.gentoo.org/glsa/202210-08 · Third Party Advisory

More vulnerabilities in tcpreplay

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tcpreplay

broadcom

= 4.4.1

No fix yet

More vulnerabilities in tcpreplay

See all →