peter bassill · operator
$ cve CVE-2017-14266 JSON

CVE-2017-14266 EXPLOIT

7.8
HIGH · CVSS 3.1 · EPSS 3.6% (pctl 89)

Patch early

A public exploit exists.

Description

tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160.

Scoring

CVSS7.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS3.59% — more likely to be exploited than 89% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2017-09-12
Last modified2026-06-17

Affected (1)

VendorProduct
broadcomtcpreplay

Public exploits

SourceTitleDate
exploit-dbtcprewrite - Heap Buffer Overflow2017-09-11

References

→ the Explorer  ·  watch your stack  ·  NVD