CVE-2022-28487 Information disclosure in n/a

High 7.5 Published 4 May 2022 Updated 3 Aug 2024

A memory leakage flaw in Tcpreplay allows attackers to potentially access sensitive data, impacting data confidentiality.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2022-28487?

CVE-2022-28487 is a high-severity vulnerability in Broadcom Tcpreplay, published on 4 May 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.

Weakness: CWE-401

Which versions are affected by CVE-2022-28487?

It affects 2 products.

Products include Broadcom Tcpreplay, Fedoraproject Fedora.

How do I fix CVE-2022-28487?

Upgrade to a fixed version.

Is CVE-2022-28487 being exploited?

There is no known exploitation of CVE-2022-28487 in the wild and no public exploit code.

All Broadcom Tcpreplay vulnerabilities

Sources

Also known as DEBIAN-CVE-2022-28487, GHSA-g42m-vjq2-x6h8, UBUNTU-CVE-2022-28487.