CVE-2024-38063

CVE-2024-38063 Overview In August 2024, Microsoft released a patch for a Windows TCP/IP Remote Code Execution RCE vulnerability. Some researchers have already published Proofs of ConceptPoC for this vulnerability, and around the same time, PatchPoint researchers also completed their analysis and...

CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis

🔐 CVE-2024-38063 — IPv6 TCP/IP Remote Code Execution Analysis 📌 Project Description This project presents a technical analysis and practical demonstration of the critical vulnerability CVE-2024-38063 , disclosed by Microsoft during Patch Tuesday August 13, 2024. The vulnerability affects the...

TED

TED TED: Abusing Tunnel Nodes and IPv6 Extension Headers for DDoS Attacks...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state lookup TCP state handling re-parses the skb to locate the TCP header. For IPv6, it uses sizeofstruct ipv6hdr; however, the surrounding IPVS code has already parsed the packet using...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix pull-bound underflow in skbchecksumsetupipv6 skbmaybepulltail subtracts skbheadlenskb from the unsigned max argument and passes the result to pskbpulltail as a signed int. The function does not ensure that max is...

CVE-2026-98852

A flaw was found in the Linux kernel's networking subsystem. An attacker could exploit this vulnerability by sending specially crafted encapsulated IPv6 network traffic, leading to a Denial of Service DoS. This issue stems from improper validation and parsing of IPv6 extension headers in tunneled...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142513)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142513 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop The ah, hbh and rt matche...

CVE-2026-76445

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

SUSE CVE-2026-98573

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix pull-bound underflow in skbchecksumsetupipv6 skbmaybepulltail subtracts skbheadlenskb from the unsigned max argument and passes the result to pskbpulltail as a signed int. The function does not ensure that max is...

CVE-2026-76445 Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

CVE-2026-76445

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine caused by a logic flaw when processing GPRS Tunneling Protocol (GTP) extension headers within the codec. An unauthenticated, remote attacker can exploit this by sending a crafted, fragmented UDP datagram conta...

EUVD-2026-107385

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

CVE-2026-76445 Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

PT-2026-120690

Name of the Vulnerable Software and Affected Versions Cisco products affected versions not specified Description A flaw in the Snort 3 Detection Engine allows an unauthenticated remote attacker to cause a denial of service DoS condition. The issue occurs during the processing of General Packet...

Cisco FTD: CVE-2026-76445: Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

Multiple Cisco Products Snort 3 DoS (cisco-sa-snort3-gtpcodec-dos-Rmecfepz)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resultin...

Cisco Open Source Snort3 Resource Management Error Vulnerability

Cisco Open Source Snort3 has a resource management vulnerability. This vulnerability stems from logical flaws in the codec used by the Snort 3 detection engine when processing GTP extension headers. Unauthenticated remote attackers can send specially crafted fragmented UDP packets, causing the...

Linux Distros Unpatched Vulnerability : CVE-2026-98573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: skbuff: fix pull-bound underflow in skbchecksumsetupipv6 skbmaybepulltail subtracts skbheadlenskb from the unsigned max argument and passes the result to...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6CSUM GSO fallback NETIFFIPV6CSUM only advertises support for checksum offload of packets without IPv6 extension headers. Packets with extension headers must fall back onto software...