CVE-2023-54094

In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segmentation Ian reported several skb corruptions triggered by rx-gro-list, collecting different oops alike: 62.624003 BUG: kernel NULL pointer dereference, address: 00000000000000c0...

CVE-2022-50783

In the Linux kernel, the following vulnerability has been resolved: mptcp: use proper req destructor for IPv6 Before, only the destructor from TCP request sock in IPv4 was called even if the subflow was IPv6. It is important to use the right destructor to avoid memory leaks with some advanced IPv...

UBUNTU-CVE-2022-50764

In the Linux kernel, the following vulnerability has been resolved: ipv6/sit: use DEVSTATSINC to avoid data-races syzbot/KCSAN reported that multiple cpus are updating dev-stats.txerror concurrently. This is because sit tunnels are NETIFFLLTX, meaning their ndostartxmit is not protected by a...

CVE-2022-50783

CVE-2022-50783 refers to a Linux kernel issue where the MPTCP IPv6 subflow used the IPv4 TCP request sock destructor, risking memory leaks when IPv6 options are present. The root cause is the incorrect destructor selection for IPv6 traffic; the fix ensures the proper destructor is used for IPv6 s...

CVE-2022-50783 mptcp: use proper req destructor for IPv6

In the Linux kernel, the following vulnerability has been resolved: mptcp: use proper req destructor for IPv6 Before, only the destructor from TCP request sock in IPv4 was called even if the subflow was IPv6. It is important to use the right destructor to avoid memory leaks with some advanced IPv...

The vulnerability of the web interface of Avtech’s microprogrammed software-based IP cameras allows a intruder to execute arbitrary commands.

The vulnerability of the web interface of Avtech’s microprogramming software-based IP cameras is related to the lack of measures taken at the control level to protect data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2025-52952

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the networking component related to IPv4 address handling. Specifically, a memory leak occurs in the inet del ifa function when deleting an IPv4...

PT-2025-53149

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s Multipath TCP MPTCP implementation. Previously, the destructor used for TCP request sockets was only from IPv4, even when the subflow was IPv6. This...

PT-2025-53130

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a data race condition within the IPv6/sit module. Specifically, multiple CPUs can concurrently update the dev-stats.tx error variable, leading to potential...

CVE-2025-29228

Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter...

ROS-20251223-7313

Vulnerability in iputils related to integer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2025-29228

CVE-2025-29228 affects Linksys E5600 router firmware (V1.1.0.26). The vulnerability is a command injection in the runtime.macClone function triggered via the mc.ip parameter, with the exploitability implied as network-based and high impact (per the CVSS 3.1 metrics: AV:N, AC:L, PR:N, UI:N, S:U, C...

The vulnerability in the implementation of IPSec protocols for Cisco SD-WAN vEdge software allows a attacker to induce a service failure.

The vulnerability of the implementation of IPSec protocol-based microprogramming software for Cisco SD-WAN vEdge routers is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2023-53969 Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Password Change

Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the userManager API to change user passwords...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the processing of malicious IPv4 fragments. An attacker can exhaust system memory and CPU resources by sending specially crafted network packets. Remediation Upgrade...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the parseFAR function when processing a PFCP Session Establishment Request containing a CreateFAR with an empty or truncated IPv4 address field. An attacker can cause the service to crash and disrupt user-plane...

PT-2025-52355

Name of the Vulnerable Software and Affected Versions Packetbeat affected versions not specified Description An unauthenticated remote attacker can cause excessive allocation of memory and CPU resources in Packetbeat through the manipulation of malicious IPv4 fragments. This resource exhaustion c...

UPF 安全漏洞

UPF is an open source user interface from the Aether SD-Core Project. A security vulnerability exists in UPF that originates from an out-of-bounds read while processing a PFCP session establishment request containing an empty or truncated IPv4 address field, which could result in a denial of...

CVE-2025-65568

The CVE-2025-65568 issue affects the omec-project UPF pfcpiface (upf-epc-pfcpiface:2.1.3-dev). During a PFCP Session Establishment Request, a CreateFAR with an empty or truncated IPv4 address triggers an out-of-bounds read in parseFAR() via ip2int(), causing an index-out-of-range panic and a deni...

CVE-2025-66647 RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When copying the contents of the first...