CVE-2025-9649

216.73.216.170

· Published 29/08/2025 14:15 · Modified 29/08/2025 16:24

Labels: CVE-2025-9649 2025-08-29 CVE-2025-9649 CWE-369 [email protected]

Essential information

Published: 29/08/2025 14:15
Modified: 29/08/2025 16:24
Author: —
Creator: —
CVSS: 4.8 MEDIUM (v3) 4.8 MEDIUM (v4.0)
CISA KEV: No
CWE: —
CVSS vector: —

CVSS metrics

Description

A security vulnerability has been detected in appneta tcpreplay 4.5.1. Impacted is the function calc_sleep_time of the file send_packets.c. Such manipulation leads to divide by zero. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 4.5.3-beta3 is recommended to address this issue. It is advisable to upgrade the affected component. The vendor confirms in a GitHub issue reply: "Was able to reproduce in 6fcbf03 but NOT 4.5.3-beta3."

NVD status

Status: Awaiting Analysis — CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.
Source: [email protected]
NVD: View on NVD

Affected products (CPE)

Product	CPE
appneta / tcpreplay	`cpe:2.3:a:appneta:tcpreplay:4.5.1:::::::*`
appneta / tcpreplay	`cpe:2.3:a:appneta:tcpreplay:4.5.3-beta3:::::::*`