PT-2021-26871

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.258 Description The issue is related to the IPv6 socket control block. It was introduced in version v4.14.98 and fixed in version v4.14.258. The actual impact and attack plausibility have not yet been prove...

PT-2021-26905

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.163 Description A null pointer dereference issue exists when IPv6 is not enabled. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-26895

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.221 Description The issue is related to the IPv6 socket control block. It was introduced in version v4.19.20 and fixed in version v4.19.221. The actual impact and attack plausibility have not yet been prove...

PT-2021-26934

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.3 through v5.10.82 Description A null pointer dereference issue exists when IPv6 is not enabled. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.3 throug...

PT-2021-26925

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.165 Description The issue is related to the IPv6 socket control block. It was introduced in version v5.0 and fixed in version v5.4.165. The actual impact and attack plausibility have not yet been proven...

PT-2021-26976

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.85 Description The issue is related to the IPv6 socket control block. It was introduced in version v5.0 and fixed in Linux Kernel version v5.10.85. The actual impact and attack plausibility have not yet bee...

PT-2021-26991

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.3 through v5.15.5 Description A null pointer dereference issue exists when IPv6 is not enabled. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.3 through...

PT-2021-27024

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.15.6 Description A memory leak issue was discovered in the fib6 rule suppress function related to IPv6. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.

...

Ubuntu 18.04 LTS : uriparser vulnerabilities (USN-5172-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5172-1 advisory. It was discovered that uriparser mishandled certain input. An attacker could use this vulnerability to cause uriparser to crash or possibly execute...

Exploit for CVE-2021-24086

CVE-2021-24086 This is a proof of concept for CVE-2021-24086...

Exploit for CVE-2021-24086

CVE-2021-24086 This is a proof of concept for CVE-2021-24086...

UDP-Hunter - Network Assessment Tool For Various UDP Services Covering Both IPv4 And IPv6 Protocols

UDP Scanning has always been a slow and painful exercise, and if you add IPv6 on top of UDP, the tool choices get pretty limited. UDP Hunter is a python based open source network assessment tool focused on UDP Service Scanning. With UDP Hunter, we have focused on providing auditing of widely know...

PT-2024-11487

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel has a memory leak issue when a fib rule is present in IPv6 nftables firewall rules and a suppress prefix rule is present in the IPv6 routing rules. This leads to a memor...

The vulnerability in the processing of IPv6 traffic by the Cisco IOS XE operating system allows a attacker to trigger a service failure.

The vulnerability of Cisco IOS XE operating system’s IPv6 traffic processing is related to a logical error in the processing of certain local IPv6 traffic. Exploiting this vulnerability can allow attackers to cause service failures...

PT-2024-11492

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc1+ 446 Description The Linux kernel has a vulnerability that can cause a null pointer dereference when IPv6 is not enabled. This occurs when trying to add an IPv6 nexthop, resulting in a call to ipv6...

openssl security update

1:1.1.1k-4 - Fixes bugs in s390x AES code. - Uses the first detected address family if IPv6 is not available - Reverts the changes in https://github.com/openssl/openssl/pull/13305 as it introduces a regression if server has a DSA key pair, the handshake fails when the protocol is not explicitly s...

Important: Red Hat Security Advisory: RHV Engine and Host Common Packages security update [ovirt-4.4.9]

Updated dependency packages for ovirt-engine and ovirt-host that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Mozilla Firefox Security Advisory (MFSA2012-02) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

openssh security update

8.0p1-10 - sshd -T requires -C when 'Match' is used in sshdconfig 1836277 8.0p1-9 - CVE-2020-14145 openssh: Observable Discrepancy leading to an information leak in the algorithm negotiation 1882252 - Hostbased ssh authentication fails if session ID contains a '/' 1944125 8.0p1-8 - ssh doesnt...