CVE catalog

CVE-2023-27787

Tcpreplay vulnerabilities

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.48% · Oct 25, 2026

An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiantcpreplaysid4.5.4-1fixed
Debiantcpreplayforky4.5.4-1fixed
Debiantcpreplaytrixie4.5.1-1fixed
Debiantcpreplaybookworm4.4.3-1vulnerable
UbuntutcpreplaynobleNot reportedvulnerable
Ubuntutcpreplaynoble4.4.4-1ubuntu0.1~esm1fixed
Ubuntutcpreplaypro4.3.3-2vulnerable
Ubuntutcpreplaypro4.3.4-1vulnerable
Ubuntutcpreplaypro4.3.4-1ubuntu0.1~esm1vulnerable
Ubuntutcpreplaypro4.3.4-1ubuntu0.1~esm2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiantcpreplaysourcesid4.4.4-1unimportantNot reportedNot reported
Debiantcpreplaysourceforky4.4.4-1unimportantNot reportedNot reported
Debiantcpreplaysourcetrixie4.4.4-1unimportantNot reportedNot reported
Debiantcpreplaysourcebookworm(unfixed)unimportantNot reportedNot reported
Ubuntutcpreplaydebnoble4.4.4-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntutcpreplaydebpro4.3.4-1ubuntu0.1~esm2Not reportedUBUNTU-CVE-2023-27787Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Ubuntu Security Notices (USN)]