CVE-2020-16898-Bad-Neighbor

CVE-2020-16898: Bad Neighbor 탐지를 위한 간단한 정책 스크립트에서 제공하는 기능은 다음과 같습니다. :: 1 스크립트는 다음에 설명된 휴리스틱을 확인합니다: https://www.mcafee.com/blogs/other-blogs/mcafee-labs/cve-2020-16898-bad-neighbor/ 설치 zeek-pkg install zeek/initconf/CVE-2020-16898-Bad-Neighbor 또는 @load CVE-2020-16898-Bad-Neighbor/scripts 상세 참고 사...

CVE-2020-16898

CVE-2020-16898: “Bad Neighbor” CVSS 점수: 8.8 CVSS 벡터: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 개요 10월 13일, Microsoft는 Windows IPv6 스택에서 매우 심각한 취약점을 발표했습니다. 이 취약점은 공격자가 악의적으로 조작된 패킷을 전송하여 잠재적으로 원격 시스템에서 임의 코드를 실행할 수 있도록 합니다. MAPP 회원과 공유된 개념 증명PoC은 매우 간단하고 완벽하게 신뢰할 수 있습니다. 이는 즉각적인...

CVE-2020-10749

CVE-2020-10749 CVE-2020-10749 PoC IPv6 가짜 라우터 알림을 통한 Kubernetes MitM 공격 교육 목적으로만 사용하십시오. 요구사항 다음 kubelet 버전을 사용하는 Kubernetes 클러스터 kubelet v1.18.0-v1.18.3 kubelet v1.17.0-v1.17.6 kubelet mtu 1450 state UP inet6 fe80::3c07:afff:feb5:7219/64 scope link validlft forever preferredlft forever / ip -6...

Docker-Container-CVE-2020-13401

CVE-2020-13401 연구 19.03.11 이전 도커에서 컨테이너의 CVE-2020-13401 취약점에 대한 연구 19.03.11 이전 버전의 Docker Engine으로 생성된 컨테이너는 네트워크상의 다른 컨테이너로부터 가짜 RARouter Advertisement 메시지를 수신하고 적용할 수 있는 취약점을 가지고 있습니다. RA 수신은 운영 체제의 정상적인 동작이지만, 네트워크에서 RA 발신자를 신뢰할 수 없는 경우 피해 컨테이너가 메시지를 수신하고 네트워크에 가입한 후 모든 네트워크 패킷을 새로운 가짜 라우터로 보내...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...

Rocky Linux 9.6 [TuxCare] Security Update: radvd (ALMALINUX9.6:CLSA-2026:1783421652)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783421652 advisory. - radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer...

CentOS Linux 7 [TuxCare] Security Update: radvd (CENTOS7:CLSA-2026:1785838548)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1785838548 advisory. - radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflo...

Rocky Linux 10.2 [CIQ] Security Update: dhcpcd / dhcpcd-debuginfo / dhcpcd-debugsource (crlsa-2026_54210)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202654210 advisory. dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length IPv6 ND option in Router Advertisement handling CVE-2026-14258 Tenable has extracted the...

AlmaLinux 9.2 [TuxCare] Security Update: libndp / libndp-devel (ALMALINUX9.2:CLSA-2025:1745270484)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745270484 advisory. - A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by...

AlmaLinux 9.6 [TuxCare] Security Update: radvd (ALMALINUX9.6:CLSA-2026:1783421652)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783421652 advisory. - radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer...

AlmaLinux 9.2 [TuxCare] Security Update: radvd (ALMALINUX9.2:CLSA-2026:1783420753)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783420753 advisory. - radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer...

EulerOS Virtualization 2.10.1 : radvd (EulerOS-SA-2026-3853)

According to the versions of the radvd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack...

CVE-2026-15893

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

CVE-2026-15893 Zephyr IPv6 Neighbor Discovery zero reachable time from crafted Router Advertisement causes assertion/DoS

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

EUVD-2026-77767

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

CVE-2026-15893

CVE-2026-15893 affects the Zephyr RTOS IPv6 Neighbor Discovery stack. The function net_if_ipv6_calc_reachable_time() in subsys/net/ip/net_if.c computes a randomized reachable time from base_reachable_time using integer division. When the Reachable Time field of an incoming Router Advertisement is...

CVE-2026-15893 Zephyr IPv6 Neighbor Discovery zero reachable time from crafted Router Advertisement causes assertion/DoS

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

CVE-2026-15893 Zephyr IPv6 Neighbor Discovery zero reachable time from crafted Router Advertisement causes assertion/DoS

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

CVE-2026-15893: Reachable Assertion

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

PT-2026-91392

net if ipv6 calc reachable time in subsys/net/ip/net if.c derives a randomized ND reachable time from ipv6-base reachable time as min reachable + sys rand32 get % max reachable - min reachable, where min reachable = base/2 and max reachable = 3base/2 using integer division. When base reachable ti...