CVE-2020-16898

CVE-2020-16898: “Mauvais Voisin” Score CVSS : 8.8 Vecteur CVSS : CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Aperçu Le 13 octobre, Microsoft a annoncé une vulnérabilité exceptionnellement critique dans la pile IPv6 de Windows, qui permet à un attaquant d'envoyer des paquets...

CVE-2020-16898-Bad-Neighbor

Простое правило для обнаружения CVE-2020-16898: Bad Neighbor Скрипт предоставляет следующие функции :: 1 Скрипт проверяет эвристику, описанную здесь: https://www.mcafee.com/blogs/other-blogs/mcafee-labs/cve-2020-16898-bad-neighbor/ Установка zeek-pkg install...

THC-Archive

THC-Archive Toutes les publications du groupe de recherche en sécurité alias hackers The Hacker's Choice Suivez-nous sur Twitter : https://twitter.com/hackerschoice Lisez-en plus sur Medium : https://medium.com/@hackerschoice Pourquoi ? parce que nous n'avons plus le temps de gérer un serveur web...

ipv6tools

IPv6Tools The IPv6Tools framework is a robust set of modules and plugins that allow a user to audit an IPv6 enabled network. The built-in modules support enumeration of IPv6 features such as ICMPv6 and Multicast Listener Discovery MLD. In addition, the framework also supports enumeration of Upper...

Cisco ASA Uncaught Exception (CVE-2023-20086)

A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to improper processing of ICMPv6 messages. A...

CVE-2026-41285-OpenBSD-v6daemons-go-brrr

CVE-2026-41285: Один пакет убивает IPv6 на OpenBSD Один специально сформированный ICMPv6-пакет из локальной сети навсегда зависает slaacd и/или rad. Автоконфигурация SLAAC-адресов IPv6 умирает, пока кто-то вручную не перезапустит демон. Без аутентификации, без привилегий — 18 байт ICMPv6-нагрузки...

Rocky Linux 9.6 [TuxCare] Security Update: radvd (ALMALINUX9.6:CLSA-2026:1783421652)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783421652 advisory. - radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer...

CentOS Linux 7 [TuxCare] Security Update: radvd (CENTOS7:CLSA-2026:1785838548)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1785838548 advisory. - radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflo...

AlmaLinux 9.6 [TuxCare] Security Update: radvd (ALMALINUX9.6:CLSA-2026:1783421652)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783421652 advisory. - radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer...

AlmaLinux 9.2 [TuxCare] Security Update: radvd (ALMALINUX9.2:CLSA-2026:1783420753)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783420753 advisory. - radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer...

CVE-2026-102714

nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...

CVE-2026-102714

nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...

EUVD-2026-89177

nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...

CVE-2026-102714

nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...

CVE-2026-102714

The Netxduo stack is vulnerable to a memory safety issue in the _nx_icmpv6_validate_options() function within common/src/nx_icmpv6_validate_options.c. The function fails to adequately validate the tail of an ICMPv6 option area, leaving a one- or two-byte residue unexamined while returning NX_SUCC...

CVE-2026-102714: Out-of-bounds Read

nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...

DEBIAN-CVE-2026-98089

In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix uninitialized transport header access in albdeterminend albdeterminend uses icmp6hdrskb to inspect ICMPv6 headers. However, in xmit paths e.g. packets sent via AFPACKET / raw sockets or forwarded packets,...

AZL-104669 CVE-2026-98089 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix uninitialized transport header access in albdeterminend albdeterminend uses icmp6hdrskb to inspect ICMPv6 headers. However, in xmit paths e.g. packets sent via AFPACKET / raw sockets or forwarded packets,...

EUVD-2026-86919

In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix uninitialized transport header access in albdeterminend albdeterminend uses icmp6hdrskb to inspect ICMPv6 headers. However, in xmit paths e.g. packets sent via AFPACKET / raw sockets or forwarded packets,...

PT-2026-98752

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bonding ALB Adaptive Load Balancing component where the alb determine nd function uses icmp6 hdrskb to inspect ICMPv6 headers. In certain transmission paths, such ...