CVE-2020-8752

Out-of-bounds write in IPv6 subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access...

F5 BIG-IP Security Bypass Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security bypass vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to obtain sensitive information by...

CVE-2019-8580

Source-routed IPv4 packets were disabled by default. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. Source-routed IPv4 packets may be unexpectedly accepted...

CVE-2020-3304

A vulnerability in the web interface of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is...

python: DoS via inefficiency in IPv{4,6}Interface classes

A vulnerability was found in the way the ipaddress python module computes hash values in the IPv4Interface and IPv6Interface classes. This flaw allows an attacker to create many dictionary entries, due to the performance of a dictionary containing the IPv4Interface or IPv6Interface objects,...

QEMU: slirp: use-after-free in ip_reass() function in ip_input.c

A use-after-free flaw was found in the SLiRP networking implementation of the QEMU emulator. Specifically, this flaw occurs in the ipreass routine while reassembling incoming IP fragments whose combined size is bigger than 65k. This flaw allows an attacker to crash the QEMU process on the host,...

Exploit for CVE-2020-16898

PoC exploit for CVE-2020-16898, a Windows TCP/IP Remote Code Execution Vulnerability. The exploit targets the Windows TCP/IP stack and uses a specially crafted IPv6 packet to trigger a buffer overflow, leading to remote code execution. The exploit is implemented in Python using the Scapy library...

Junos OS IPv6 Data Message Denial of Service Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in Junos OS that can be exploited by an attacker to send malicious IPv6...

CVE-2020-16898

A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client. To exploit this vulnerability, an...

The vulnerability of the TCP/IP protocol stack implementation in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the TCP/IP protocol stack implementation in the Windows operating system is related to errors in ICMPv6 packet processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the TCP/IP protocol stack implementation in the Windows operating system allows a hacker to induce a service failure.

The vulnerability of the TCP/IP protocol stack implementation in the Windows operating system is related to errors in ICMPv6 packet processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the IPv6 traffic processing service of the StarOS operating system, allowing a hacker to trigger a service failure

The vulnerability of the IPv6 traffic processing service of the StarOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the IPv6 traffic processing service of the StarOS operating system, allowing a hacker to trigger a service failure

The vulnerability of the IPv6 traffic processing service of the StarOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

DEBIAN-CVE-2020-25645

A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The...

PT-2020-4249 · Microsoft · Windows Tcp/Ip Stack +1

Name of the Vulnerable Software and Affected Versions: Windows TCP/IP stack affected versions not specified Description: A remote code execution issue exists due to improper handling of ICMPv6 Router Advertisement packets by the Windows TCP/IP stack. This allows an attacker to execute arbitrary...

Cisco Video Surveillance 8000 Series IP Cameras Resource Management Error Vulnerability

Cisco Video Surveillance 8000 Series IP Cameras is a video surveillance camera from Cisco USA. A resource management error vulnerability exists in Cisco Video Surveillance 8000 Series IP Cameras. The vulnerability arises from improper management of system resources e.g., memory, disk space, files...

kernel: some ipv6 protocols not encrypted over ipsec tunnel

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data...

kernel: some ipv6 protocols not encrypted over ipsec tunnel

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data...

The Linux kernel when using IPv6 allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent as demonstrated by thcping.

...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2020-72733)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in the IP Service Level Agreement SLA response program feature of Cisco IOS XE. The vulnerability stems from the possibility that the IP S...