CVE-2022-27940: 
NixOS vulnerability analysis and mitigation

CVE-2022-27940 affects tcprewrite in Tcpreplay version 4.4.1, specifically involving a heap-based buffer over-read vulnerability in the get_ipv6_next function located in common/get.c. The vulnerability was discovered in March 2022 and has been assigned a CVSS v3.1 base score of 7.8 (High) (NVD).

The vulnerability is characterized as a heap-based buffer over-read issue that occurs in the get_ipv6_next function within common/get.c of Tcpreplay 4.4.1. The CVSS v3.1 vector string is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local attack vector, low attack complexity, no privileges required, and high impacts on confidentiality, integrity, and availability (NVD).

The vulnerability can lead to high impacts on system confidentiality, integrity, and availability when successfully exploited. The heap-based buffer over-read could potentially allow attackers to access sensitive information or cause system instability (NVD).

The vulnerability has been fixed in Tcpreplay version 4.4.2. Users are advised to upgrade to this version or later. Multiple distributions have released security updates, including Fedora and Gentoo, to address this vulnerability (Fedora Update, Gentoo Advisory).