iodine

iodine - https://code.kryo.se/iodine This is a piece of software that lets you tunnel IPv4 data through a DNS server. This can be usable in different situations where internet access is firewalled, but DNS queries are allowed. COMPILING To compile iodine you need meson. Run the following commands...

Juniper Junos OS Multiple Vulnerabilities (JSA100061)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA100061 advisory. - IPv6-in-IPv4 tunneling RFC 4213 allows an attacker to spoof and route traffic via an exposed network interface. CVE-2025-23019 - IPv4-in-IPv6 and IPv6-in-IPv6...

CVE-2020-11900

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free...

CVE-2020-11902

The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read...

CVE-2025-23019: Improper Verification of Source of a Communication Channel

IPv6-in-IPv4 tunneling RFC 4213 allows an attacker to spoof and route traffic via an exposed network interface...

VulnCheck KEV: CVE-2020-11900

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free...

K17133899: Multiple Treck TCP/IP stack vulnerabilities

Security Advisory Description CVE-2020-11896 The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling. CVE-2020-11897 The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets. CVE-2020-11898 The Treck TCP/IP stack...

SUSE CVE-2020-11896

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling...

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack, related to the repeated memory release, allows a attacker to cause a service failure.

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack is related to the reallocation of memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

CVE-2020-11900

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free...

CVE-2020-11900

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free...

CVE-2020-11896

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling...

Remote code execution

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling...

Double free

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free...

CVE-2020-11900

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free...

CVE-2020-11900

CVE-2020-11900 affects the Treck TCP/IP stack (embedded) prior to 6.0.1.41, where IPv4 tunneling may trigger a double-free in the tunneling path. This can lead to use-after-free conditions, potentially impacting availability (DoS) or stability. Treck recommends upgrading to 6.0.1.67 or later; dow...

CVE-2020-11896

CVE-2020-11896 affects the Treck TCP/IP stack prior to version 6.0.1.66 and enables Remote Code Execution via IPv4 tunneling. The Ripple20 set documents multiple vulnerabilities in this stack; a PoC exploit exists (e.g., Digi Connect ME 9210). Connected advisories (Cisco, Fortinet, F5, others) di...

CVE-2020-11896

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling...

CVE-2020-11896: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling...

PT-2020-5942

Name of the Vulnerable Software and Affected Versions Treck TCP/IP stack versions prior to 6.0.1.66 Description A vulnerability exists in the implementation of IPv4 tunneling within the Treck TCP/IP stack due to insufficient input validation. Exploitation of this issue may allow a remote attacker...