CVE-2025-39770 net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM

In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6CSUM When performing Generic Segmentation Offload GSO on an IPv6 packet that contains extension headers, the kernel incorrectly requests checksum offload if the...

CVE-2025-39770 net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM

In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6CSUM When performing Generic Segmentation Offload GSO on an IPv6 packet that contains extension headers, the kernel incorrectly requests checksum offload if the...

CVE-2025-39770

In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6CSUM When performing Generic Segmentation Offload GSO on an IPv6 packet that contains extension headers, the kernel incorrectly requests checksum offload if the...

RUSTSEC-2025-0068 serde_yml crate is unsound and unmaintained

Using serdeyml::ser::Serializer.emitter can cause a segmentation fault, which is unsound. The GitHub project for serdeyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommended alternatives -...

serde_yml crate is unsound and unmaintained

Using serdeyml::ser::Serializer.emitter can cause a segmentation fault, which is unsound. The GitHub project for serdeyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommended alternatives -...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the GSO stack not properly disabling IPv6 checksum offloading, which could lead to unsupported device...

Linux Distros Unpatched Vulnerability : CVE-2022-22891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecmarefobjectinline in /jerry- core/ecma/base/ecma-gc.c. CVE-2022-22891 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2022-44081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail. CVE-2022-44081 Note that Nessus relies on the presence of the packa...

Linux Distros Unpatched Vulnerability : CVE-2017-11098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When SWFTools 0.9.2 processes a crafted file in png2swf, it can lead to a Segmentation Violation in the pngload function in lib/png.c. CVE-2017-11098 Note that...

Linux Distros Unpatched Vulnerability : CVE-2022-46440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c. CVE-2022-46440 Note that Nessus relies on the presence of t...

Linux Distros Unpatched Vulnerability : CVE-2022-35087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at /src/gif2swf.c. CVE-2022-35087 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2024-33259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scannerseek at jerry-core/parser/js/js-scanner-util.c...

Linux Distros Unpatched Vulnerability : CVE-2023-30408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry. CVE-2023-30408 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2019-17528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.5.1.0. There is a SEGV in the function AP4TfhdAtom::SetDefaultSampleSize at Core/Ap4TfhdAtom.h when called from...

Linux Distros Unpatched Vulnerability : CVE-2024-26335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - swftools v0.9.2 was discovered to contain a segmentation violation via the function statefree at swftools/src/swfc-history.c. CVE-2024-26335 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2018-14590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4Processor::ProcessFragments in Core/Ap4Processor.cpp. CVE-2018-14590 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2017-11099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wavconvert2mono function in lib/wav.c. CVE-2017-11099 No...

Linux Distros Unpatched Vulnerability : CVE-2022-35106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::computeTableChecksumunsigned char, int at /xpdf/FoFiTrueType.cc...

Linux Distros Unpatched Vulnerability : CVE-2022-35114

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFTools commit 772e55a2 was discovered to contain a segmentation violation via extractFrame at /readers/swf.c. CVE-2022-35114 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-41425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4decrypt. CVE-2022-41425 Note that...