CVE-2025-51006

Name	CVE-2025-51006
Description	Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dlt_linuxsll2_cleanup() function in plugins/dlt_linuxsll2/linuxsll2.c. This vulnerability is triggered when tcpedit_dlt_cleanup() indirectly invokes the cleanup routine multiple times on the same memory region. By supplying a specifically crafted pcap file to the tcprewrite binary, a local attacker can exploit this flaw to cause a Denial of Service (DoS) via memory corruption.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
tcpreplay (PTS)	bullseye	4.3.3-2	vulnerable
	bookworm	4.4.3-1	vulnerable
	trixie	4.5.1-1	vulnerable
	forky, sid	4.5.2-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
tcpreplay	source	(unstable)	4.5.2-1

https://github.com/appneta/tcpreplay/issues/926
Fixed via: https://github.com/appneta/tcpreplay/issues/902
https://github.com/sy460129/CVE-2025-51006