25 matches found
ipeeyoupeewepee
ipeeyoupeewepee 公開インターネット上のホスト（主にCiscoルーター）向けのスキャナおよび攻撃スイートです。これらのホストは、IP-in-IPおよびGREプロトコルでカプセル化された認証されていないパケットを転送します。 この脆弱性は「トンネリングプロトコルの安全でない実装」として知られ、CVE-2020-10136およびCVE-2024-7595で追跡されています。影響を受けるホストから任意のIPパケットを送信（ただし受信は不可）できます。...
ripple20
"Ripple20" Treck IOT/ICS デバイス発見とエクスプロイト検出 v0.2 概要: Treckデバイス、ディスカバリ/スキャン試行、およびTreck TCP/IPスタックにおける"Ripple20"脆弱性群の悪用を受動的に検出するためのZeekパッケージです。 参照: https://corelight.blog/2020/06/30/ripple20-zeek-package-open-sourced/ https://www.jsof-tech.com/ripple20/ python/scapy スキャニングパッケージはJSOF提供。...
CVE-2026-64410
A flaw was found in the Linux kernel's netfilter component, specifically concerning the handling of IPIP IP-in-IP tunnel hardware offload. The system attempts to utilize hardware offload for IPIP tunnels, a feature not yet supported by existing drivers. A remote attacker could potentially exploit...
CVE-2026-64410
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, give up early on setting up the hardware offload for this scenario. This patch adds a stub that can be enhanced to add...
EUVD-2026-32313
In the Linux kernel, the following vulnerability has been resolved: net: remove WARNONONCE when accessing forward path array Although unlikely, recent support for IPIP tunnels increases chances of reaching this WARNONONCE if userspace manages to build a sufficiently long forward path. Remove it...
CVE-2026-31675
A flaw was found in the Linux kernel's netem network emulator module. When processing certain non-linear network packets, specifically those sent via an AFPACKET TXRING over an IPIP tunnel, a calculation error can occur. This error leads to an out-of-bounds memory access, which could result in...
EUVD-2009-0350
Malware in sbrugna...
K000153181: Linux kernel vmxnet3 module vulnerability CVE-2025-37799
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix malformed packet sizing in vmxnet3processxdp vmxnet3 driver's XDP handling is buggy for packet sizes using ring0 that is, packet sizes between 128 - 3k bytes. We noticed MTU-related...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: vmxnet3: Fixed malformed packet sizes in vmxnet3processxdp. The XDP handling of the vmxnet3 driver is buggy for packet sizes using ring0 i.e., packet sizes between 128 and 3k bytes. We noticed connectivity issues related to MT...
PT-2022-29084
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.13 through 5.15.25 Description The issue concerns the handling of the outer IP header in certain cases, specifically with IP-in-IP IPIP and net failover configurations. The actual impact and potential for attack have no...
PT-2022-29165
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description The issue concerns the handling of outer IP headers in certain network configurations, specifically in cases involving IP-in-IP IPIP and net failover. The actual impact and potential for atta...
PT-2022-29226
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.304 Description The issue concerns the handling of the outer IP header in certain cases, specifically with IP-in-IP IPIP and net failover configurations. The actual impact and potential for attack have not...
PT-2022-29018
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.13 through 5.16.11 Description The issue concerns the handling of outer IP headers in certain network configurations, specifically in cases involving IP-in-IP IPIP and net failover. The problem was introduced in version...
PT-2022-29135
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.13 through 5.10.102 Description The issue concerns the handling of outer IP headers in certain network configurations, specifically in cases involving IP-in-IP IPIP and net failover. The problem was introduced in versio...
PT-2022-29188
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.232 Description The issue concerns the handling of the outer IP header in certain cases, specifically with IP-in-IP IPIP and net failover configurations. The actual impact and potential for attack have not...
CVE-2020-10136
A flaw was found in the IP-in-IP protocol. An unauthenticated attacker can use the IP-in-IP protocol to route network traffic through a vulnerable device, which can lead to spoofing, access control bypasses, and other unexpected network behaviors. Mitigation Systems that have IP in IP kernel...
Internet Bug Bounty: IP-in-IP protocol routes arbitrary traffic by default - CVE-2020-10136
Many machines 150K-180K on the internet accept and route IP over IP by default. IP-in-IP encapsulation is a tunneling protocol specified in RFC 2003 that allows for IP packets to be encapsulated inside another IP packets. This is very similar to IPSEC VPNs in tunnel mode, except in the case of...
Severe Cisco DoS Flaw Can Cripple Nexus Switches
Cisco has patched a high-severity flaw in its NX-OS software, the network operating system used by Cisco’s Nexus-series Ethernet switches. If exploited, the vulnerability could allow an unauthenticated, remote attacker to bypass the input access control lists ACLs configured on affected Nexus...
CVE-2020-10136
IP-in-IP protocol specifies IP Encapsulation within IP standard RFC 2003, STD 1 that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing...
CVE-2020-10136
IP-in-IP protocol specifies IP Encapsulation within IP standard RFC 2003, STD 1 that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing...