CVE-2020-7451

CVE-2020-7451 affects FreeBSD: TCP servers sending or retransmitting IPv6 SYN-ACK (and challenge ACK) segments may disclose one byte of kernel memory due to Traffic Class not initialized. Affected: FreeBSD 12.1-STABLE before r358739, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r358740...

CVE-2020-7451

In FreeBSD 12.1-STABLE before r358739, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r358740, and 11.3-RELEASE before 11.3-RELEASE-p7, a TCP SYN-ACK or challenge TCP-ACK segment over IPv6 that is transmitted or retransmitted does not properly initialize the Traffic Class field disclosin...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

SUSE-SU-2020:1049-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-19737 fixes one issue. The following security issue was fixed: - CVE-2020-1749: Fixed a vulnerability where in some cases IPv6 traffic would not be encrypted over an IPsec tunnel bsc1165629...

CVE-2019-14022

CVE-2019-14022 concerns an error in parsing ipv6_header length due to a missing length check in Qualcomm/Snapdragon components (Auto, Compute, IOT, Wearables, Mobile, etc.). Affected family includes Snapdragon platforms (APQ, SDM/SM series, Nicobar, etc.) across numerous devices. Root cause: insu...

OracleVM 3.3 : ipmitool (OVMSA-2020-0012)

The remote OracleVM system is missing necessary patches to address critical security updates : - Backport fix for CVE-2020-5208 - Fix missing return in ipmikontronoemmain - CID1261317 - rebase to latest stable upstream version - resolves: rhbz1253416 - remove the redundant OpenIMPI dependency -...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the xfrm6tunnelrcv function in the Linux kernel's IPv6 implementation could lead to a use-after-free or double free flaw in tunnel6rcv. A remote attacker could use this flaw to send specially-crafted packets to a...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the Linux kernel handled fragmented IPv6 UDP datagrams over the bridge with UDP Fragmentation Offload UFO functionality on. A remote attacker could use this flaw to cause a denial of service...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a IPv6 fragment identification value generation could allow a remote attacker to disrupt a target system's networking, preventing legitimate users from accessing its services...

Man-in-the-Middle (MitM)

kernel is vulnerable to man-in-the-middle MitM. The vulnerability exists through the way IPv4 and IPv6 protocol sequence numbers and fragment IDs were generated could allow a man-in-the-middle attacker to inject packets and possibly hijack connections. Protocol sequence numbers and fragment IDs a...

Use-after-free

The kernel is vulnerable to use-after-free. Due to a flaw found in the tcprcvstateprocess function in the Linux kernel TCP/IP protocol suite implementation, if a system using IPv6 had the IPV6RECVPKTINFO option set on a listening socket, a remote attacker could send an IPv6 packet to that system,...

Denial Of Service (DoS)

The kernel is vulnerable to Denial of Service DoS. A NULL pointer dereference flaw was found in the ip6dstlookuptail function in the Linux kernel. An attacker on the local network could trigger this flaw by sending IPv6 traffic to a target system, leading to a system crash kernel OOPS if...

Denial Of Service (DoS)

The kernel is vulnerable denial of service DoS.A flaw was found in the IPv6 Extension Header EH handling implementation in the Linux kernel. The skb-dst data structure was not properly validated in the ipv6hopjumbo function. This could possibly lead to a remote denial of service...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the handling of IPv6 type 0 routing headers that allowed remote users to cause a denial of service that led to a network amplification between two routers...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the flow list of listening IPv6 sockets that allowed a local user to cause a denial of service...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists as a flaw in the nfconntrack netfilter module for IPv6 that allowed remote users to bypass certain netfilter rules using IPv6 fragments...

Denial Of Service (DoS)

The Linux kernel is vulnerable to Denial Of Service DoS. A flaw in the IPv6 socket option handling allows a local user to cause a denial of service...

Arbitrary Memory Read

The Linux kernel is vulnerable to arbitrary memory read. A flaw in the IPv6 socket option handling allows a local user to read arbitrary kernel memory...

CVE-2020-1633

Due to a new NDP proxy feature for EVPN leaf nodes introduced in Junos OS 17.4, crafted NDPv6 packets could transit a Junos device configured as a Broadband Network Gateway BNG and reach the EVPN leaf node, causing a stale MAC address entry. This could cause legitimate traffic to be discarded,...

CVE-2020-1633

Due to a new NDP proxy feature for EVPN leaf nodes introduced in Junos OS 17.4, crafted NDPv6 packets could transit a Junos device configured as a Broadband Network Gateway BNG and reach the EVPN leaf node, causing a stale MAC address entry. This could cause legitimate traffic to be discarded,...