CVE-2025-11617

CVE-2025-11617 describes a missing validation check in FreeRTOS-Plus-TCP’s IPv6 packet processing that can cause an out-of-bounds read when handling IPv6 packets with incorrect payload lengths. Affected component is the IPv6 processing path in FreeRTOS-Plus-TCP; issue is limited to IPv6-enabled a...

CVE-2025-11617 Buffer Over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCP

A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect payload lengths in the packet header. This issue only affects applications using IPv6. We recommend users upgrade to the latest version and...

CVE-2025-11617 Buffer Over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCP

A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect payload lengths in the packet header. This issue only affects applications using IPv6. We recommend users upgrade to the latest version and...

CVE-2025-11617 Buffer Over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCP

A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect payload lengths in the packet header. This issue only affects applications using IPv6. We recommend users upgrade to the latest version and...

EUVD-2025-33754

A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain message types which are smaller than the expected size. These issues only affect applications using IPv6. Users should upgrade to the latest...

CVE-2025-11616

CVE-2025-11616 affects FreeRTOS-Plus-TCP: a missing validation check in the ICMPv6 packet processing code can cause an out-of-bounds read when handling certain ICMPv6 message types smaller than expected. The issue applies to IPv6-enabled applications. The documented mitigation is to upgrade to th...

PT-2025-41583

Name of the Vulnerable Software and Affected Versions FreeRTOS-Plus-TCP affected versions not specified Description A validation flaw exists in the IPv6 packet processing code of FreeRTOS-Plus-TCP. This flaw can result in an out-of-bounds read when processing IPv6 packets containing incorrect...

FreeRTOS-Plus-TCP 安全漏洞

FreeRTOS-Plus-TCP is an extensible open source and thread-safe TCP/IP stack for FreeRTOS. A security vulnerability exists in FreeRTOS-Plus-TCP that stems from a lack of validation checks in the IPv6 packet processing code, which could lead to out-of-bounds reads...

[SECURITY] Fedora 41 Update: turbo-attack-0.1.0-3.fc41

A turbo traffic generator pentesting tool to generate random traffic with random mac and ip addresses in addition to random sequence numbers to a particular ip and port...

[SECURITY] Fedora 42 Update: turbo-attack-0.1.0-4.fc42

A turbo traffic generator pentesting tool to generate random traffic with random mac and ip addresses in addition to random sequence numbers to a particular ip and port...

CVE-2025-57457

An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter...

PT-2025-46651

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the IPv6 tunnel implementation where the headroom can increase indefinitely, similar to a previously addressed issue in the IPv4 tunnel. This occurs...

EUVD-2019-3898

Malware in sbrugna...

EUVD-2008-1106

Malware in sbrugna...

EUVD-2007-5687

Malware in sbrugna...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986629)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986629 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tpip6sendmsg When len = INTMAX - transhdrlen, ulen = len +...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987348 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix memory leak in fib6rulesuppress The kernel leaks memory when a fib rule is present in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-389670)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-389670 advisory. In the Linux kernel, the following vulnerability has been resolved: net/ipv6: avoid possible UAF in ip6routempathnotify syzbot found another use-after-free in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414415)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414415 advisory. A race condition was found in the Linux kernel's IP framework for transforming packets XFRM subsystem when multiple calls to xfrmprobealgs occurred simultaneously...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-403561)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-403561 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL deref in fib6nhinit syzbot reminds us that in6devget can return NULL...