1107 matches found
CVE-2025-66646 RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reass
RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When receiving an fragmented IPv6 packe...
CVE-2025-66646
CVE-2025-66646 affects RIOT OS, specifically in the IPv6 fragmentation reassembly (gnrc_ipv6_ext_frag). When a fragmented IPv6 packet with fragment offset 0 and an empty payload is processed, the payload pointer is set to NULL but the code still copies into the reassembly buffer, causing a NULL p...
CVE-2025-66646 RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reass
RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When receiving an fragmented IPv6 packe...
CVE-2025-66646 RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reass
RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When receiving an fragmented IPv6 packe...
EUVD-2025-203929
RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When receiving an fragmented IPv6 packe...
PT-2025-51894
Name of the Vulnerable Software and Affected Versions RIOT versions prior to 2025.10 Description RIOT OS, designed for IoT and embedded devices, contains a flaw in its IPv6 fragmentation reassembly process. Specifically, the implementation lacks a size check when copying the first fragment offset...
RIOT å®å Øę¼ę“
RIOT is RIOT's open source set of operating systems for applications in the Internet of Things IoT space. A security vulnerability exists in RIOT version v2025.07, which stems from a lack of size checking in the IPv6 fragmentation reorganization implementation, which could lead to memory corrupti...
PT-2025-51877
Name of the Vulnerable Software and Affected Versions RIOT versions prior to 2025.10 Description RIOT is an open-source microcontroller operating system designed for Internet of Things IoT devices and other embedded systems. A flaw exists in the IPv6 fragmentation reassembly implementation...
RIOT 代ē é®é¢ę¼ę“
RIOT is RIOT's open source set of operating systems for applications in the Internet of Things IoT space. A code issue vulnerability exists in RIOT version v2025.07, which stems from a null pointer dereference in the IPv6 fragmentation reorganization implementation, which could lead to an operati...
UBUNTU-CVE-2023-53822
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Ignore frags from uninitialized peer in dp. When max virtual ap interfaces are configured in all the bands with ACS and hostapd restart is done every 60s, a crash is observed at random times. In this certain scenari...
BIT-NGINX-GATEWAY-2024-34161 NGINX HTTP/3 QUIC vulnerability
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a Maximum Transmission Unit MTU of 4096 or greater without fragmentation, undisclosed QUIC packets can cause NGINX worker processes to leak previously freed memory...
OPENSUSE-SU-2025:20119-1 Security update for tcpreplay
This update for tcpreplay fixes the following issues: - update to 4.5.2: features added since 4.4.4 - fix/recalculate header checksum for ipv6-frag - IPv6 frag checksum support - AFXDP socket support - tcpreplay -w write into a pcap file - tcpreplay --fixhdrlen - --include and --exclude options -...
Security update for tcpreplay (important)
openSUSE Security Update: Security update for tcpreplay Announcement ID: openSUSE-SU-2025:0439-1 Rating: important References: 1218249 1221324 1222131 1243845 1247919 1248322 1248595 1248596 1248597 1248964 1250356 Cross-References: CVE-2023-4256 CVE-2023-43279 CVE-2024-22654 CVE-2024-3024...
Ransomware's Fragmentation Reaches a Breaking Point While LockBit Returns
Key Takeaways: 85 active ransomware and extortion groups observed in Q3 2025, reflecting the most decentralized ransomware ecosystem to date. 1,590 victims disclosed across 85 leak sites, showing high, sustained activity despite law-enforcement pressure. 14 new ransomware brands launched this...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990764)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990764 advisory. In the Linux kernel, the following vulnerability has been resolved: net: gso: fix panic on fraglist with mixed head alloc types Since commit 3dcbdb134f32 net: gso: F...
CYPRESS: Transferring Secrets in the Shadow of Visible Packets
Network steganography and covert communication channels have been studied extensively in the past. However, prior works offer minimal practical use for their proposed techniques and are limited to specific use cases and network protocols. In this paper, we show that covert channels in networking...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990541)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990541 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not check against the agno of th...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989260)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989260 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211: fix use-after-free in CCMP/GCMP RX When PN checking is done in mac80211, for...
Astra Linux ā Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: Wifi: mt76: mt7996 ā Drop fragments with multicast or broadcast RA. IEEE 802.11 fragmentation can only be applied to unicast frames. Therefore, fragments are dropped during multicast or broadcast RA. This patch addresses...
CVE-2025-11411 Possible domain hijacking via promiscuous records in the authority section
NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...