CVE catalog

CVE-2023-27788

Tcpreplay vulnerabilities

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.38% · Oct 25, 2026

An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiantcpreplaysid4.5.4-1fixed
Debiantcpreplayforky4.5.4-1fixed
Debiantcpreplaytrixie4.5.1-1fixed
Debiantcpreplaybookworm4.4.3-1vulnerable
UbuntutcpreplaynobleNot reportedvulnerable
Ubuntutcpreplaynoble4.4.4-1ubuntu0.1~esm1fixed
Ubuntutcpreplaypro4.3.3-2vulnerable
Ubuntutcpreplaypro4.3.4-1vulnerable
Ubuntutcpreplaypro4.3.4-1ubuntu0.1~esm1vulnerable
Ubuntutcpreplaypro4.3.4-1ubuntu0.1~esm2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiantcpreplaysourcesid4.4.4-1unimportantNot reportedNot reported
Debiantcpreplaysourceforky4.4.4-1unimportantNot reportedNot reported
Debiantcpreplaysourcetrixie4.4.4-1unimportantNot reportedNot reported
Debiantcpreplaysourcebookworm(unfixed)unimportantNot reportedNot reported
Ubuntutcpreplaydebnoble4.4.4-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntutcpreplaydebpro4.3.4-1ubuntu0.1~esm2Not reportedUBUNTU-CVE-2023-27788Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Ubuntu Security Notices (USN)]