Lucene search
K

54 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.1 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001632 advisory. The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which...

7.8CVSS6.8AI score0.00074EPSS
Exploits0References13
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.4 views

MiracleLinux 3 : kernel-2.6.18-371.5.AXS3 (AXSA:2014-508:03)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-508:03 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

4.7CVSS7.5AI score0.00234EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

MiracleLinux 4 : kernel-2.6.32-696.20.1.el6 (AXSA:2018-2579:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2579:02 advisory. An integer overflow vulnerability in ip6find1stfragopt function was found. A local attacker that has privileges of CAPNETRAW to open raw socket can...

7.8CVSS6.8AI score0.20809EPSS
Exploits8References4
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.6 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001789)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001789 advisory. net/ipv6/netfilter/nfconntrackreasm.c in the Linux kernel before 2.6.34, when the nfconntrackipv6 module is enabled, allows remote attackers to cause a denial of...

7.8CVSS7.6AI score0.00623EPSS
Exploits1References12
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.2 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001927)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001927 advisory. net/ipv6/ip6output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload UFO processing of small packets after the...

6.1CVSS8AI score0.0062EPSS
Exploits1References20
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002387)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002387 advisory. The ip6fragqueue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network restrictions via overlapping...

5CVSS5.4AI score0.01262EPSS
Exploits2References13
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.3 views

MiracleLinux 4 : kernel-2.6.32-279.2.1.el6 (AXSA:2012-829:07)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-829:07 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

7.8CVSS6.7AI score0.00623EPSS
Exploits1References3
NVD
NVD
added 2025/12/17 9:16 p.m.0 views

CVE-2025-66647

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When copying the contents of the first...

9.8CVSS0.00668EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/17 8:21 p.m.2 views

CVE-2025-66647 RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When copying the contents of the first...

6.3CVSS7.6AI score0.00668EPSS
Exploits1References6
OSV
OSV
added 2025/12/17 8:21 p.m.2 views

CVE-2025-66647 RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When copying the contents of the first...

6.3CVSS7.9AI score0.00668EPSS
Exploits1References8
NVD
NVD
added 2025/12/17 8:15 p.m.2 views

CVE-2025-66646

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When receiving an fragmented IPv6 packe...

7.5CVSS0.00281EPSS
Exploits1References10
Cvelist
Cvelist
added 2025/12/17 7:18 p.m.24 views

CVE-2025-66646 RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reass

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When receiving an fragmented IPv6 packe...

6.3CVSS0.00281EPSS
Exploits1References10
CVE
CVE
added 2025/12/17 7:18 p.m.5 views

CVE-2025-66646

CVE-2025-66646 affects RIOT OS, specifically in the IPv6 fragmentation reassembly (gnrc_ipv6_ext_frag). When a fragmented IPv6 packet with fragment offset 0 and an empty payload is processed, the payload pointer is set to NULL but the code still copies into the reassembly buffer, causing a NULL p...

7.5CVSS6.6AI score0.00281EPSS
Exploits1References10Affected Software1
OSV
OSV
added 2025/12/17 7:18 p.m.2 views

CVE-2025-66646 RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reass

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When receiving an fragmented IPv6 packe...

6.3CVSS6.9AI score0.00281EPSS
Exploits1References12
EUVD
EUVD
added 2025/12/17 7:18 p.m.1 views

EUVD-2025-203929

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When receiving an fragmented IPv6 packe...

6.3CVSS6.4AI score0.00281EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/12/17 12:0 a.m.2 views

PT-2025-51894

Name of the Vulnerable Software and Affected Versions RIOT versions prior to 2025.10 Description RIOT OS, designed for IoT and embedded devices, contains a flaw in its IPv6 fragmentation reassembly process. Specifically, the implementation lacks a size check when copying the first fragment offset...

9.8CVSS8AI score0.00668EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.1 views

RIOT 代码问题漏洞

RIOT is RIOT's open source set of operating systems for applications in the Internet of Things IoT space. A code issue vulnerability exists in RIOT version v2025.07, which stems from a null pointer dereference in the IPv6 fragmentation reorganization implementation, which could lead to an operati...

7.5CVSS6.8AI score0.00281EPSS
Exploits1References10
OSV
OSV
added 2025/11/27 12:29 p.m.1 views

OPENSUSE-SU-2025:20119-1 Security update for tcpreplay

This update for tcpreplay fixes the following issues: - update to 4.5.2: features added since 4.4.4 - fix/recalculate header checksum for ipv6-frag - IPv6 frag checksum support - AFXDP socket support - tcpreplay -w write into a pcap file - tcpreplay --fixhdrlen - --include and --exclude options -...

7.8CVSS5.8AI score0.00151EPSS
Exploits10References22
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-18013

Malware in sbrugna...

7.8CVSS6.7AI score0.00074EPSS
Exploits0References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-4549

Malware in sbrugna...

9.8CVSS9.2AI score0.00604EPSS
Exploits0References13
Rows per page
Query Builder