385 matches found
CVE-2026-23124 ipv6: annotate data-race in ndisc_router_discovery()
In the Linux kernel, the following vulnerability has been resolved: ipv6: annotate data-race in ndiscrouterdiscovery syzbot found that ndiscrouterdiscovery could read and write in6dev-ramtu without holding a lock 1 This looks fine, IFLAINET6RAMTU is best effort. Add READONCE/WRITEONCE to document...
FreeBSD rtsold/rtsol DNSSL Command Injection
This module exploits a command injection vulnerability CVE-2025-14558 in FreeBSD's rtsol8 and rtsold8 programs. These programs do not validate the domain search list options provided in IPv6 Router Advertisement messages; the option body is passed to resolvconf8 unmodified. resolvconf8 is a shell...
CVE-2025-67188
A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204B20210112. The issue resides in the setRadvdCfg interface of the /lib/cstemodules/ipv6.so module. The function fails to properly validate the length of the user-controlled radvdinterfacename parameter, allowing remote attacker...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001099)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001099 advisory. The fib6addrt2node function in net/ipv6/ip6fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement RA messages in...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002199)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002199 advisory. The fib6addrt2node function in net/ipv6/ip6fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement RA messages in...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001890)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001890 advisory. The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to caus...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002388)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002388 advisory. net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers t...
CVE-2022-27882
slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router advertisement. NOTE: privilege separation and pledge can prevent exploitation...
FreeBSD rtsold 15.x - Remote Code Execution via DNSSL
Exploit Title: FreeBSD rtsold 15.x - Remote Code Execution via DNSSL Date: 2025-12-16 Exploit Author: Lukas Johannes Möller Vendor Homepage: https://www.freebsd.org/ Version: FreeBSD 13.x, 14.x, 15.x before 2025-12-16 patches Tested on: FreeBSD 14.1-RELEASE CVE: CVE-2025-14558 Description: rtsold...
EUVD-2017-2759
Malware in sbrugna...
EUVD-2009-2185
Malware in sbrugna...
EUVD-2013-4053
Malware in sbrugna...
EUVD-2015-5815
Malware in sbrugna...
EUVD-2011-2382
Malware in sbrugna...
EUVD-2012-5286
Malware in sbrugna...
EUVD-2010-4635
Malware in sbrugna...
EUVD-2015-8104
Malware in sbrugna...
EUVD-2021-10365
Malware in sbrugna...