CVE-2025-51005: 
NixOS vulnerability analysis and mitigation

A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of tcpreplay version 4.5.1. The vulnerability was discovered and disclosed on September 23, 2025, affecting the checksum calculation logic. When processing crafted pcap files, the program incorrectly handles memory calculations in the dochecksummath_liveplay function within tcpliveplay.c (NVD).

The vulnerability occurs in the dochecksummath_liveplay function at line 1175 of tcpliveplay.c. The issue stems from miscalculation of the remaining packet length derived from the IPv4 header, which is later used in checksum operations. This leads to memory access beyond the allocated buffer. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (NVD, GitHub Issue).

The primary impact of this vulnerability is a potential denial of service condition. When exploited, the heap buffer overflow can cause the application to crash or become unstable (GitHub PoC).

The vendor has announced that the vulnerable function will be removed starting from version 4.6. Currently, there is no official patch available for version 4.5.1. Users are advised to wait for the release of version 4.6 or avoid processing untrusted pcap files with tcpliveplay (GitHub Issue).