11 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001632)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001632 advisory. The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003023)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003023 advisory. The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003438)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003438 advisory. The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which...
USN-4434-1 libvncserver vulnerabilities
Ramin Farajpour Cami discovered that LibVNCServer incorrectly handled certain malformed unix socket names. A remote attacker could exploit this with a crafted socket name, leading to a denial of service, or possibly execute arbitrary code. CVE-2019-20839 It was discovered that LibVNCServer did no...
kernel: net: IPv6 fragmentation implementation of nexthdr field may be associated with an invalid option
The IPv6 fragmentation implementation in the Linux kernel does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service out-of-bounds read and BUG or possibly have unspecified other impact via crafted socket and send syste...
Red Hat Enterprise Linux Competitive Conditions Vulnerability
Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG Messaging Realtime Grid 2 are both products of Red Hat, Inc. The former is an operating system and the latter is an IT infrastructure platform for integrating High Performance Computing HPC. kernel-rt is one of the toolkits that sends SysRq...
kernel: net: IPv6 fragmentation implementation of nexthdr field may be associated with an invalid option
The IPv6 fragmentation implementation in the Linux kernel does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service out-of-bounds read and BUG or possibly have unspecified other impact via crafted socket and send syste...
kernel: net: IPv6 fragmentation implementation of nexthdr field may be associated with an invalid option
The IPv6 fragmentation implementation in the Linux kernel does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service out-of-bounds read and BUG or possibly have unspecified other impact via crafted socket and send syste...
DEBIAN-CVE-2017-9074
The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service out-of-bounds read and BUG or possibly have unspecified other impact via crafted socket...
PT-2017-2224 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.11.1 Description: The issue is related to the implementation of IPv6 packet fragmentation in the Linux kernel, which does not properly handle an invalid option associated with the nexthdr field. This can be...
UBUNTU-CVE-2017-9074
The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service out-of-bounds read and BUG or possibly have unspecified other impact via crafted socket...