CVE-2026-101303

The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address. A process in a classic non-VNET jail can send UDP datagrams to services listening on the host's IPv6 loopback address, bypassing jail networ...

CVE-2026-101303

The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address. A process in a classic non-VNET jail can send UDP datagrams to services listening on the host's IPv6 loopback address, bypassing jail networ...

CVE-2026-101303

The FreeBSD kernel contains a vulnerability in the IPv6 UDP send path for unconnected sockets. The system fails to apply the jail policy that rewrites loopback destination addresses to the jail's primary IPv6 address. This allows a process within a classic (non-VNET) jail to send UDP datagrams to...

CVE-2026-101303: Incorrectly Specified Destination in a Communication Channel

The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address. A process in a classic non-VNET jail can send UDP datagrams to services listening on the host's IPv6 loopback address, bypassing jail networ...

DEBIAN-CVE-2026-18727

A flaw was found in open-iscsi's iscsiuio component. This vulnerability involves an integer underflow and out-of-bounds read during Dynamic Host Configuration Protocol for IPv6 DHCPv6 packet parsing. Specifically, crafted DHCPv6 Advertise traffic with a short User Datagram Protocol UDP length can...

UBUNTU-CVE-2026-18727

A flaw was found in open-iscsi's iscsiuio component. This vulnerability involves an integer underflow and out-of-bounds read during Dynamic Host Configuration Protocol for IPv6 DHCPv6 packet parsing. Specifically, crafted DHCPv6 Advertise traffic with a short User Datagram Protocol UDP length can...

PT-2026-71332

Name of the Vulnerable Software and Affected Versions open-iscsi affected versions not specified Description A flaw in the iscsiuio component involves an integer underflow and out-of-bounds read during the parsing of Dynamic Host Configuration Protocol for IPv6 DHCPv6 packets. An unauthenticated...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002406 advisory. The udp6ufofragment function in net/ipv6/udpoffload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload UFO is enabled, does not properly perform a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002001)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002001 advisory. The udp6ufofragment function in net/ipv6/udpoffload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload UFO is enabled, does not properly perform a...

EUVD-2017-11531

Malware in sbrugna...

EUVD-2013-4421

Malware in sbrugna...

EUVD-2016-10031

Malware in sbrugna...

EUVD-2023-51437

Malicious code in bioql PyPI...

CVE-2023-47310

A misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows incoming IPv6 UDP traceroute packets...

PT-2025-27443 · Mikrotik · Mikrotik Routeros

Name of the Vulnerable Software and Affected Versions: MikroTik RouterOS versions prior to 7.14 Description: A misconfiguration in the default settings of MikroTik RouterOS allows incoming IPv6 UDP traceroute packets. Recommendations: For versions prior to 7.14, update to version 7.14 or later to...

kernel: nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().

In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb-protocol,data,macheader for outer header in nshgsosegment. syzbot triggered various splats see 0 and links by a crafted GSO packet of VIRTIONETHDRGSOUDP layering the following protocols: ETHP8021AD + ETHPNSH +...

Exploit for CVE-2021-24086

PoC exploit for CVE-2021-24086, a Windows TCP/IP Denial of Service Vulnerability. The target is the Windows TCP/IP stack, specifically the tcpip.sys driver, which is vulnerable to a NULL dereference. The vulnerability can be triggered remotely by sending a malicious UDP packet over IPv6. The...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the Linux kernel handled fragmented IPv6 UDP datagrams over the bridge with UDP Fragmentation Offload UFO functionality on. A remote attacker could use this flaw to cause a denial of service...

CVE-2017-2348

The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks...

CVE-2017-2348: Uncontrolled Resource Consumption

The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks...