rplay through 3.3.2 allows attackers to cause a denial of service (SIGSEGV and daemon crash) or possibly have unspecified other impact. This occurs in memcpy in the RPLAY_DATA case in rplay_unpack in librplay/rplay.c, potentially reachable via packet data with no authentication.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Sun, 19 Oct 2025 02:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-770
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}


Sun, 19 Oct 2025 01:15:00 +0000

Type Values Removed Values Added
Description rplay through 3.3.2 allows attackers to cause a denial of service (SIGSEGV and daemon crash) or possibly have unspecified other impact. This occurs in memcpy in the RPLAY_DATA case in rplay_unpack in librplay/rplay.c, potentially reachable via packet data with no authentication.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-10-19T01:14:25.135Z

Reserved: 2025-10-19T00:00:00.000Z

Link: CVE-2025-62672

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-10-19T01:15:35.000

Modified: 2025-10-19T02:15:34.990

Link: CVE-2025-62672

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.