CVE-2021-24086-exp

CVE-2021-24086 Esta es una prueba de concepto para CVE-2021-24086 "Vulnerabilidad de denegación de servicio de TCP/IP de Windows", una desreferencia NULL en tcpip.sys corregida por Microsoft en febrero de 2021. Según este tweet, la vulnerabilidad fue encontrada por @piazzt. Se puede activar...

CVE-2021-24086

CVE-2021-24086 这是针对 CVE-2021-24086（“Windows TCP/IP 拒绝服务漏洞”）的概念验证代码，该漏洞是 tcpip.sys 中的一个空指针解引用，微软于 2021 年 2 月修补。根据这条 推文，该漏洞由 @piazzt 发现。它可以通过发送恶意的 IPv6 UDP 数据包远程触发。 你可以在此阅读微软的博客：影响 TCP/IP 的多项安全更新：CVE-2021-24074、CVE-2021-24094 和 CVE-2021-24086。该博客简要讨论了影响和缓解/规避措施。 关于根本原因的更深入讨论可在 doar-e.github.io...

CVE-2026-53362

A flaw was found in the Linux kernel's ipv6 networking subsystem. An incorrect parameter length calculation allows an attacker with permissions to create UDP sockets to trigger overwrites of kernel memory, potentially leading to privilege escalation, data corruption, or a system crash. Mitigation...

CVE-2026-53362 ipv6: account for fraggap on the paged allocation path

In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In ip6appenddata, when the paged-allocation branch is taken MSGMORE / NETIFFSG / large fraglen, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen;...

EUVD-2025-33752

A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header. This issue only affects applications using IPv6. We recommend upgrading to the...