Lucene search
K

14 matches found

Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.5 views

PT-2026-43717

In the Linux kernel, the following vulnerability has been resolved: ipvs: skip ipv6 extension headers for csum checks Protocol checksum validation fails for IPv6 if there are extension headers before the protocol header. iph-len already contains its offset, so use it to fix the problem...

5.8AI score0.00024EPSS
Exploits0References3
CVE
CVE
added 2025/12/16 1:40 p.m.4 views

CVE-2025-40363

The CVE-2025-40363 vulnerability in the Linux kernel concerns net/ipv6: a field-spanning memcpy warning in AH output. Root cause: extension headers are copied into IPv6 address fields, triggering fortify-string warnings about writes beyond 16-byte saddr. The issue is resolved by copying addresses...

6.4AI score0.00058EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-12555

Malware in sbrugna...

8.7CVSS7.6AI score0.00709EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/07/30 12:0 a.m.1 views

PT-2025-33771

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.153-1deb11u1 Linux kernel versions prior to 5.10.244-1 Linux kernel versions prior to 6.6.105 Description The Linux kernel has several vulnerabilities, including potential privilege escalation, denial of...

7.8CVSS7.2AI score0.00024EPSS
Exploits0
NVD
NVD
added 2024/04/15 11:15 a.m.13 views

CVE-2024-28894

Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP Network Series, which may allow an unauthenticated attacker to stop the device operations by sending a specially crafted packet...

5.3CVSS6.5AI score0.00126EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/04/15 10:47 a.m.16 views

CVE-2024-28894

Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP Network Series, which may allow an unauthenticated attacker to stop the device operations by sending a specially crafted packet...

6.7AI score0.00126EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/04/15 10:47 a.m.12 views

CVE-2024-28894

Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP Network Series, which may allow an unauthenticated attacker to stop the device operations by sending a specially crafted packet...

6.8AI score0.00126EPSS
Exploits0References2
CVE
CVE
added 2024/04/15 10:47 a.m.67 views

CVE-2024-28894

The CVE-2024-28894 issue affects Cente middleware TCP/IP Network Series (DMG MORI Digital Co., Ltd. / NEXT Co., Ltd.) and stems from an out-of-bounds read caused by improper checking of option length values in IPv6 headers (and IPv6 ND packets per related JVN entry). An unauthenticated attacker c...

5.3CVSS6.7AI score0.00126EPSS
Exploits0References2Affected Software3
Positive Technologies
Positive Technologies
added 2024/04/15 12:0 a.m.1 views

PT-2024-22634 · Unknown · Cente Middleware Tcp/Ip Network Series

Name of the Vulnerable Software and Affected Versions: Cente middleware TCP/IP Network Series affected versions not specified Description: An out-of-bounds read issue exists due to improper checking of the option length values in IPv6 headers. This may allow an unauthenticated attacker to stop...

5.3CVSS6.2AI score0.00126EPSS
Exploits0References7
OSV
OSV
added 2022/12/08 2:42 a.m.6 views

GSD-2022-1007883 net: use struct_group to copy ip/ipv6 header addresses

net: use structgroup to copy ip/ipv6 header addresses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

7.2AI score
Exploits0
Prion
Prion
added 2021/04/22 9:15 p.m.18 views

Design/Logic Flaw

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2017.02.4, Nucleus ReadyStart V4 All versions V4.1.0, Nucleus Source Code All versions...

5CVSS7.4AI score0.00709EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2020/12/11 11:15 p.m.9 views

Type confusion

An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 headers does not validate whether the IPv6 payload length field is equal to the actual size of the payload, which leads to an Out-of-Bounds read during the ICMPv6 checksum calculation, resulting in either Denial-of-Service...

6.4CVSS9.4AI score0.00739EPSS
Exploits0References2Affected Software2
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.3 views

uIP-Contiki-OS 输入验证错误漏洞

Contiki is an open source, highly portable, networked multitasking operating system for memory-constrained systems. An infinite loop vulnerability exists in rplremoveheader in net/rpl/rpl-ext-header.c in the uIP TCP/IP stack component in Contiki 3.0 and earlier when processing RPL extended header...

7.5CVSS7.1AI score0.0032EPSS
Exploits0References4
CNVD
CNVD
added 2015/02/26 12:0 a.m.1 views

Cisco IOS XR Software IPv6 Message Handling Denial of Service Vulnerability

Cisco IOS XR is a member of the Cisco IOS software family and uses a microkernel-based distribution operating system architecture. Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System NCS 6000 devices, and Cisco IOS XR 5.1.3 and 5.1.4 on Carrier Routing System X CRS-X devices fail to...

7.1CVSS7AI score0.00563EPSS
Exploits0References1
Rows per page
Query Builder