Bug 1197416 (CVE-2022-25484) - VUL-1: CVE-2022-25484: tcpreplay: assertion fail in packet2tree()
Summary: VUL-1: CVE-2022-25484: tcpreplay: assertion fail in packet2tree()
Status: RESOLVED FIXED
Alias: CVE-2022-25484
Product: openSUSE Distribution
Classification: openSUSE
Component: Security (show other bugs)
Version: Leap 15.4
Hardware: Other Other
: P4 - Low : Normal (vote)
Target Milestone: ---
Assignee: Michal Kubeček
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/326972/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-03-23 08:13 UTC by Thomas Leroy
Modified: 2025-04-23 18:40 UTC (History)
0 users

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Comment 1 Thomas Leroy 2022-03-23 08:39:22 UTC 
It seems that there is no upstream fix yet.

Should be affected:
- openSUSE:Factory                                     4.3.4
- openSUSE:Backports:SLE-15-SP3                        4.2.6
- openSUSE:Backports:SLE-15-SP4                        4.3.4
Comment 2 Michal Kubeček 2025-04-23 18:40:26 UTC 
Fixed in upstream since commit 46cf964a7db6 ("Bug #677 - fixes for 
tcpprep tree") which is present in versions 4.4.0 and newer. All 
maintained openSUSE distributions have version at least 4.4.4 so that
they are no longer affected.