Lucene search
K

8 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.2 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003438)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003438 advisory. The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which...

7.8CVSS6.8AI score0.00423EPSS
Exploits0References13
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-26147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in...

5.4CVSS7AI score0.07604EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.4 views

The vulnerability of the ip6_fragment() function in the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ip6fragment function in the net/ipv6/ip6output.c module of the Linux operating system’s IPv6 kernel implementation is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

7.8CVSS6.5AI score0.00265EPSS
Exploits0References21Affected Software4
RedHat Linux
RedHat Linux
added 2021/11/29 12:38 p.m.3 views

samba: Subsequent DCE/RPC fragment injection vulnerability

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements...

7.5CVSS6.8AI score0.01906EPSS
Exploits0References5
OSV
OSV
added 2021/05/11 8:15 p.m.3 views

DEBIAN-CVE-2020-26147

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames...

5.4CVSS6.7AI score0.07604EPSS
Exploits0References1
OSV
OSV
added 2021/05/11 6:0 p.m.1 views

UBUNTU-CVE-2020-24587

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and...

2.6CVSS6.7AI score0.02592EPSS
Exploits2References10
OSV
OSV
added 2021/05/11 6:0 p.m.2 views

UBUNTU-CVE-2020-26143

An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration...

6.5CVSS6.8AI score0.04173EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2017/06/15 12:0 a.m.5 views

The vulnerability of the IPv6 packet fragmentation implementation in the Linux operating system allows a attacker to cause a service failure or exert other effects.

The vulnerability of IPv6 packet fragmentation implementation in the Linux operating system’s kernel is related to an unacceptable parameter. Exploiting this vulnerability can allow a local attacker to cause service failures or other effects such as reading beyond the memory boundary through syst...

7.3CVSS6.5AI score0.00423EPSS
Exploits0References7Affected Software4
Rows per page
Query Builder