1885 matches found
CVE-2026-40369
이 내용은 VoidSec의 CVE-2026-40369에 대한 공개 기술 분석을 재구성하고 요약한 것으로, 이해를 돕기 위해 순서도와 방어적 참고 사항을 추가했습니다. 모든 핵심 기술 세부 사항은 그의 연구에서 비롯되었습니다. 이 버그에 대해 독립적인 리버스 엔지니어링을 수행하지 않았습니다. CVE-2026-40369: 12-바이트 Windows 커널 증가 프리미티브의 방어적 분석 CVE-2026-40369 에 대한 방어적 기술 분석입니다. 이 취약점은 NtQuerySystemInformation클래스 0xFD / 253을 통해...
CVE-2004-0558
이것은 CVE-2004-0558에 대한 개념 증명 익스플로잇입니다. 특정 버전의 CUPs1.1.x는 길이가 0인 UDP 패킷을 수신할 때 서비스 거부DoS 공격에 취약합니다. https://www.exploit-db.com/exploits/24599/ 이 공격은 nmap으로도 수행할 수 있으며, 본 익스플로잇은 연구 및 교육 목적으로 개발되었다는 점을 참고하시기 바랍니다. 사용법: python kill-cups.py -t 192.168.1.91 추가 명령줄 플래그는 연구 목적으로 포함되었습니다. UDP는 패킷 헤더에 임의의 소...
cve-2025-39682
CVE-2025-39682 exploit on kernelCTF mitigation 인스턴스에서의 이것은 또한 제 첫 번째 ? 모르겠습니다, 이것은 CVE-2024-58239의 변종입니다 1-day exploit입니다. Patch: tls: fix handling of zero-length records on the rxlist 이 CVE는 exp398과 exp403에서 사용되었습니다. kernelCTF 스프레드시트. 폴더 구조와 exploit 실행 방법은 제 CVE-2024-58239 저장소를 참조하세요. 이전 exploit...
UBUNTU-CVE-2026-104042
A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...
PT-2026-106296
A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: net: USB: Fixed an error in the warning message for incorrect direction handling in plusb.c. The syzbot fuzzer detected a bug in the plusb network driver: A zero-length control-OUT transfer was incorrectly treated as a read...
CVE-2025-39682
CVE-2025-39682 — Linux kTLS ゼロ長 rxlist レコード UAF トラッキングサイト CVE-2025-39682 パッチステータストラッカーのソース: Linux カーネルの kTLS 受信パス net/tls における use-after-free に対して、どのディストリビューションが修正を出荷済みかを記録するシングルページサイト。 事実が存在する場所 バグに関するすべて — CVE ID、影響を受けるバージョンと修正済みバージョン、アップストリームの修正コミット、発見および開示のクレジット、現在のディストリビューションごとのパッチステータス —...
eero-zero-length-ipv6-options-header-dos
eeroOS 이더넷 인터페이스 서비스 거부 취약점 CVE-2023-5324 eero Pro 5 장치가 페이로드 길이가 0이고 존재하지 않는 다른 hop-by-hop 또는 destination options 확장 헤더를 참조하는 hop-by-hop 또는 destination options 확장 헤더를 포함하는 IPv6 패킷을 수신하면패킷이 해당 콘텐츠를 제공하기 전에 끝나기 때문에 이더넷 인터페이스는 더 이상 패킷을 수신하지 않게 됩니다. 이더넷을 통한 전송 및 모든 WiFi 통신은 영향을 받지 않습니다. 모든 테스트는 "브리지...
Rocky Linux 9.6 [TuxCare] Security Update: nmap / nmap-ncat (ALMALINUX9.6:CLSA-2026:1789630245)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789630245 advisory. - Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application b...
Rocky Linux 10.0 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_16904)
The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202516904 advisory. kernel: fs: export anoninodemakesecureinode and fix secretmem LSM bypass CVE-2025-38396 kernel: smb: client: fix use-after-free in cifsoplockbreak...
SUSE CVE-2026-97546
In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...
UBUNTU-CVE-2026-98145
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain whose commandcount is zero passes the payload length check, because structsizepayload, data, 0 is just the header. The fill loop then does not run, so offset...
CVE-2026-98145
The Linux kernel contains a vulnerability in the accel/amdxdna driver where a command chain with a command_count of zero improperly passes payload length checks. Because the struct_size calculation only accounts for the header, the fill loop is skipped, resulting in the submission of a zero-lengt...
CVE-2026-98145 accel/amdxdna: reject a command chain that carries no commands
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain whose commandcount is zero passes the payload length check, because structsizepayload, data, 0 is just the header. The fill loop then does not run, so offset...
CVE-2026-97546 xfs: don't spin forever on zero-length dirents when salvaging them
In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...
CVE-2026-97546
In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...
CVE-2026-98145: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain whose commandcount is zero passes the payload length check, because structsizepayload, data, 0 is just the header. The fill loop then does not run, so offset...
CVE-2026-97546: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...
CVE-2026-97546
In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...
