CVE-2026-26457

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coapdumpmsg function when processing COAP messages containing options with zero length...

eero-zero-length-ipv6-options-header-dos

eeroOS Vulnerabilità di Denial of Service dell'interfaccia Ethernet CVE-2023-5324 Se i dispositivi eero Pro 5 ricevono un pacchetto IPv6 con lunghezza del payload pari a zero e contenente un header di estensione hop-by-hop o delle opzioni di destinazione che fa riferimento a un altro header di...

CVE-2026-63381

A flaw was found in Libevent, an event notification library. A use-after-free vulnerability exists in the evbufferaddbufferreference function when it processes an output buffer with a zero length. This can lead to a dangling pointer, which an attacker could exploit to cause memory corruption or...

CVE-2026-26457

ccoap at commit 77f55c4b contains a null pointer dereference in the coap_dump_msg() function. The bug is triggered when processing COAP messages that include options with zero length. No CVSS score, confirmed fix version, or in-the-wild exploitation details are provided in the available documents...

EUVD-2026-67098

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coapdumpmsg function when processing COAP messages containing options with zero length...

cve-2025-39682

استغلال CVE-2025-39682 على مثيل kernelCTF مع التخفيفات هذا أيضًا أول استغلال لي من نوع 1-day ؟ لا أعلم، هذا متغير من CVE-2024-58239. التصحيح: tls: fix handling of zero-length records on the rxlist تم استخدام هذا CVE في exp398 و exp403. جدول kernelCTF. للاطلاع على بنية المجلدات وكيفية تشغيل...

CVE-2026-40369

هذه إعادة صياغة وملخص للتحليل الفني العام الذي نشره VoidSec حول CVE-2026-40369، مع إضافة مخطط انسيابي وملاحظات دفاعية لفهمي الشخصي. جميع التفاصيل التقنية الأساسية مأخوذة من بحثه. لم أجري هندسة عكسية مستقلة على هذا الخطأ البرمجي. CVE-2026-40369: تحليل دفاعي لبدائية الزيادة ذات الـ12 بايت في نواة...

CVE-2004-0558

Questo è un exploit proof of concept per CVE-2004-0558 Versioni specifiche di CUPs 1.1.x sono vulnerabili a un attacco Denial of Service quando viene inviato un pacchetto UDP di lunghezza zero https://www.exploit-db.com/exploits/24599/ Vale la pena notare che questo può essere ottenuto con nmap, ...

openssl: SSL_select_next_proto buffer overread

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: USB: Fixed an error in the warning message for incorrect direction handling in plusb.c. The syzbot fuzzer detected a bug in the plusb network driver: A zero-length control-OUT transfer was incorrectly treated as a read...

openssl: SSL_select_next_proto buffer overread

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...

CVE-2026-72330

A flaw was found in the Linux kernel's TLS Transport Layer Security implementation. A remote attacker could send specially crafted zero-length TLS application data records. This could cause the system to repeatedly process these empty records, blocking all subsequent legitimate data on the...

CVE-2026-72330

In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tlsswreadsock A peer may send a zero-length TLS applicationdata record; TLS 1.3 explicitly permits these as a traffic-analysis countermeasure RFC 8446, Section 5.1. After decryption such a...

UBUNTU-CVE-2026-72330

In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tlsswreadsock A peer may send a zero-length TLS applicationdata record; TLS 1.3 explicitly permits these as a traffic-analysis countermeasure RFC 8446, Section 5.1. After decryption such a...

CVE-2026-72330

In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tlsswreadsock A peer may send a zero-length TLS applicationdata record; TLS 1.3 explicitly permits these as a traffic-analysis countermeasure RFC 8446, Section 5.1. After decryption such a...

CVE-2026-72330

The CVE-2026-72330 entry documents a Linux kernel vulnerability in the TLS data path. A peer can send a zero-length TLS application_data record (TLS 1.3 allows these as a traffic-analysis countermeasure). After decryption such a record has full_len == 0 and, in tls_sw_read_sock(), the read loop r...

PT-2026-72518

In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tls sw read sock A peer may send a zero-length TLS application data record; TLS 1.3 explicitly permits these as a traffic-analysis countermeasure RFC 8446, Section 5.1. After decryption such...

CVE-2026-53792

rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero. Attackers can send a specially craft...

CVE-2026-53792 rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block

rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero. Attackers can send a specially craft...

CVE-2026-53792 rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block

rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero. Attackers can send a specially craft...