CVE-2026-15422 SCTP needs to better-check INIT ACK chunk parameters

The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in the chunk. Since this lookup runs during packet classification i.e. before SCTP integrity checks or IPsec policy are applied a remote, unauthenticated...

CVE-2023-31284

illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net...

EUVD-2023-35598

Malicious code in bioql PyPI...

CVE-2024-26317

In illumos illumos-gate 2024-02-15, an error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates, causing the algorithm to yield a result of POINTATINFINITY when it should not. A man-in-the-middle attacker could use this to interfere with a connection...

illumos-gate 安全漏洞

illumos-gate is an open source Unix operating system from illumos open source. A security vulnerability exists in illumos-gate, which stems from an error in the elliptic curve point addition algorithm using mixed Jacobi affine coordinates, causing an attacked party to compute the wrong shared key...

CVE-2024-26317: Use of a Broken or Risky Cryptographic Algorithm

In illumos illumos-gate 2024-02-15, an error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates, causing the algorithm to yield a result of POINTATINFINITY when it should not. A man-in-the-middle attacker could use this to interfere with a connection...

PT-2025-2394 · Illumos · Illumos

Name of the Vulnerable Software and Affected Versions: illumos illumos-gate affected versions not specified Description: An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates, causing the algorithm to yield a result of POINT AT INFINITY when it...

CVE-2023-31284

illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net...

CVE-2023-31284

illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net...

CVE-2023-31284

illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net...

CVE-2023-31284: Out-of-bounds Write

illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net...

illumos 缓冲区错误漏洞

illumos is an open source Unix operating system. A security vulnerability exists in previous versions of illumos illumos-gate 676abcb, which originates from a stack buffer overflow in /dev/net that can be exploited by an attacker to elevate privileges via long filenames in /dev/net...

CVE-2023-31284

CVE-2023-31284 describes a stack buffer overflow in illumos illumos-gate’s /dev/net, allowing privilege escalation via a stat on a long file name in /dev/net. The issue affects illumos-gate before commit 676abcb. Red Hat entry and Oracle Solaris references align the CVE as equivalent to CVE-2023-...