11243 matches found
CVE-2021-45484
Constrained to the NetBSD IPv6 stack: CVE-2021-45484 involves a weak cryptographic PRNG used in the IPv6 fragment ID generation algorithm in NetBSD up to version 9.2. The vulnerability is tied to how fragment IDs are generated, potentially impacting confidentiality, as noted in public advisories....
CVE-2021-45485
In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/outputcore.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses...
CVE-2021-45485
CVE-2021-45485 affects the Linux kernel IPv6 path: net/ipv6/output_core.c exposes an information leak due to how a hash table is used, enabling IPv6 source address-based observation. Impact is partial confidentiality exposure; no integrity/availability impact stated. Affected: Linux kernel prior ...
CVE-2021-45485
In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/outputcore.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses...
CVE-2021-45489
In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...
CVE-2021-45489
CVE-2021-45489 refers to NetBSD up to 9.2 where the IPv6 Flow Label generation uses a weak cryptographic PRNG. Affected: NetBSD 9.2 and earlier IP stack behavior related to Flow Label generation. Consequence: potential information leakage or traffic-related exposure described by multiple sources;...
Linux kernel加密问题漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a security vulnerability that stems from an information leak in the net IPv6 output core.c in the IPv6 implementation of the Linux kernel prior to...
NetBSD 安全特征问题漏洞
NetBSD is an open source Unix-like operating system from the NetBSD Foundation. NetBSD suffers from a security signature issue vulnerability that stems from the use of a weak cryptographic PRNG for the IPv6 slice ID generation algorithm in versions of NetBSD up to 9.2...
GSD-2021-1002556 ipv6: fix memory leak in fib6_rule_suppress
ipv6: fix memory leak in fib6rulesuppress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...
GSD-2021-1002523 net: nexthop: fix null pointer dereference when IPv6 is not enabled
net: nexthop: fix null pointer dereference when IPv6 is not enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...
GSD-2021-1002487 ipv6: fix memory leak in fib6_rule_suppress
ipv6: fix memory leak in fib6rulesuppress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.84 by commit...
GSD-2021-1002466 net: nexthop: fix null pointer dereference when IPv6 is not enabled
net: nexthop: fix null pointer dereference when IPv6 is not enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit...
GSD-2021-1002447 ipv6: fix memory leak in fib6_rule_suppress
ipv6: fix memory leak in fib6rulesuppress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.164 by commit...
GSD-2021-1002437 net: nexthop: fix null pointer dereference when IPv6 is not enabled
net: nexthop: fix null pointer dereference when IPv6 is not enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.163 by commit...
GSD-2021-1002427 seg6: fix the iif in the IPv6 socket control block
seg6: fix the iif in the IPv6 socket control block This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.221 by commit...
GSD-2021-1002403 seg6: fix the iif in the IPv6 socket control block
seg6: fix the iif in the IPv6 socket control block This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.258 by commit...
avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.
...
Ubuntu 18.04 LTS : uriparser vulnerabilities (USN-5172-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5172-1 advisory. It was discovered that uriparser mishandled certain input. An attacker could use this vulnerability to cause uriparser to crash or possibly execute...
