395 matches found
ipeeyoupeewepee
ipeeyoupeewepee 공용 인터넷 상의 호스트주로 시스코 라우터 중 IP-in-IP 및 GRE 프로토콜로 캡슐화된 인증되지 않은 패킷을 전달하는 호스트를 위한 스캐너 및 공격 도구입니다. 이 취약점은 "터널링 프로토콜의 안전하지 않은 구현"으로 알려져 있으며 CVE-2020-10136 및 CVE-2024-7595로 추적됩니다. 이 취약점을 통해 영향을 받는 호스트로부터 모든 IP 패킷을 보낼 수 있습니다수신은 불가능. 처음에는 패킷을 보낼 수만 있고 받을 수 없는 기능이 쓸모없어 보일 수 있습니다. 그러나 많은 영향을 ...
CVE-2023-42326
pfSense 2.7.0 명령 삽입 익스플로잇 CVE-2023-42326 이 Python 스크립트는 pfSense 2.7.0의 명령 삽입 취약점CVE-2023-42326에 대한 개념 증명PoC 익스플로잇입니다. 이 취약점을 통해 인증된 공격자는 interfacesgifedit.php 및 interfacesgreedit.php 구성 요소를 통해 임의 명령을 삽입하고 실행할 수 있습니다. 기능 익스플로잇 모드 선택 gif 또는 gre으로 취약한 구성 요소 선택. 임의 셸 명령을 실행할 수 있는 명령 삽입 기능. 자동 스레드 관리를...
CVE-2026-74478
A flaw was found in the Linux kernel. A remote attacker, by sending specially crafted packets over GRE or L2TPv3 transports, could trigger a use-after-free vulnerability. This occurs in the vectormmsgrx function when a packet's overlay header fails verification, causing the system to attempt to...
ipdecap
ipdecap pcap 파일에서 GRE, IPIP, 6in4 및 ESPipsec 프로토콜로 캡슐화된 트래픽을 디캡슐화합니다. 또한 IEEE 802.1Q가상 LAN - VLAN 헤더도 제거할 수 있습니다. 문서는 http://loicpefferkorn.net/ipdecap 에서 확인할 수 있습니다...
SUSE CVE-2026-74478
In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...
CVE-2026-74478
In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...
CVE-2026-74478
In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...
EUVD-2026-59671
In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...
CVE-2026-74478
CVE-2026-74478 affects the Linux kernel, specifically the vector_mmsg_rx() path. When a packet is discarded because verify_header() fails, the code previously continued without advancing the slot, leaving a freed skb in the vector and causing a use-after-free in the RX path. The issue can be trig...
CVE-2026-74478 um: vector: fix use-after-free in vector_mmsg_rx()
In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...
CVE-2026-74478 um: vector: fix use-after-free in vector_mmsg_rx()
In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...
Linux Distros Unpatched Vulnerability : CVE-2026-74478
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the...
CVE-2026-68296
A flaw was found in the Linux kernel's Generic Routing Encapsulation GRE tunnel implementation. An issue with how lockless transmission was handled for GRE tunnels with Sequence Number SEQ or Checksum CSUM features could lead to a deadlock. This deadlock occurs when the GRE transmit function...
Linux Distros Unpatched Vulnerability : CVE-2026-68296
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed netdevfeatures: convert NETIFFLLTX to dev-lltx, NETIFFLLTX was set...
CVE-2026-68296
In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...
CVE-2026-68296
In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...
UBUNTU-CVE-2026-68296
In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...
CVE-2026-68121
In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header before calling devhardheader. Device header callbacks are allowed to reallocate the skb head, invalidating pointers into it. This c...
CVE-2026-68296 net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM
In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...
CVE-2026-68296 net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM
In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...