ALSA-2026:54210 Moderate: dhcpcd security update

The dhcpcd package provides a minimalistic network configuration daemon that supports IPv4 and IPv6 configuration including configuration discovery through NDP, DHCPv4 and DHCPv6 protocols. Security Fixes: dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length IPv6 ND option in Route...

Linux Distros Unpatched Vulnerability : CVE-2026-73213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addrlesseq in src/client/nsturnioaddr.c uses a component-wise comparison f...

RHEL 10 : dhcpcd (RHSA-2026:54210)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:54210 advisory. The dhcpcd package provides a minimalistic network configuration daemon that supports IPv4 and IPv6 configuration including configuration discovery...

RHEL 10 : grafana (RHSA-2026:54178)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54178 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana:...

SUSE CVE-2026-68322

In the Linux kernel, the following vulnerability has been resolved: rds: Fix inet6addrlst NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, inet6addrlst is never initialized because inet6init exits before addrconfinit is called to initialize it. An attempt t...

SUSE CVE-2026-68336

In the Linux kernel, the following vulnerability has been resolved: bonding: fix devconfall NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, the devconfall is never initialized because inet6init exits before addrconfinit is called which initializes it...

CVE-2026-68127

A flaw was found in the Linux kernel's Identifier-Locator Addressing ILA subsystem. This vulnerability, a use-after-free, occurs during the processing of IPv6 packets when an ILA checksum adjustment transport route is configured. A remote attacker, after an administrator has configured the...

CVE-2026-73213

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addrlesseq in src/client/nsturnioaddr.c uses a component-wise comparison for native IPv6 min-max intervals in ioaaddrinrange, allowing an authenticated TURN client to relay to an IPv6 peer that is numerically...

CVE-2026-73213

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addrlesseq in src/client/nsturnioaddr.c uses a component-wise comparison for native IPv6 min-max intervals in ioaaddrinrange, allowing an authenticated TURN client to relay to an IPv6 peer that is numerically...

CVE-2026-73212

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, goodpeeraddr in src/server/nsturnserver.c uses ioaaddrinrange in src/client/nsturnioaddr.c without canonicalizing IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms, allowing an authenticated RFC 6062 T...

UBUNTU-CVE-2026-73213

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addrlesseq in src/client/nsturnioaddr.c uses a component-wise comparison for native IPv6 min-max intervals in ioaaddrinrange, allowing an authenticated TURN client to relay to an IPv6 peer that is numerically...

netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended...

CVE-2026-68322

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS component. A local user can trigger a null pointer dereference by attempting to bind an RDS socket to an IPv6 address when IPv6 is explicitly disabled. This can lead to a system crash, resulting in a Denial of Service DoS...

CVE-2026-73213 Coturn: `addr_less_eq()` does a component-wise IPv6 comparison instead of a lexicographic one, letting an authenticated TURN client bypass `denied-peer-ip`/`allowed-peer-ip` IPv6 ranges (TURN-specific SSRF)

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addrlesseq in src/client/nsturnioaddr.c uses a component-wise comparison for native IPv6 min-max intervals in ioaaddrinrange, allowing an authenticated TURN client to relay to an IPv6 peer that is numerically...

CVE-2026-73213

CVE-2026-73213 affects the Coturn TURN/STUN server. Prior to 4.16.0, addr_less_eq() used a component-wise IPv6 comparison in ioa_addr_in_range(), allowing an authenticated TURN client to relay to an IPv6 peer that is numerically within a configured denied-peer-ip range but classified as outside i...

EUVD-2026-56819

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addrlesseq in src/client/nsturnioaddr.c uses a component-wise comparison for native IPv6 min-max intervals in ioaaddrinrange, allowing an authenticated TURN client to relay to an IPv6 peer that is numerically...

CVE-2026-73213 Coturn: `addr_less_eq()` does a component-wise IPv6 comparison instead of a lexicographic one, letting an authenticated TURN client bypass `denied-peer-ip`/`allowed-peer-ip` IPv6 ranges (TURN-specific SSRF)

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addrlesseq in src/client/nsturnioaddr.c uses a component-wise comparison for native IPv6 min-max intervals in ioaaddrinrange, allowing an authenticated TURN client to relay to an IPv6 peer that is numerically...

CVE-2026-73213 Coturn: `addr_less_eq()` does a component-wise IPv6 comparison instead of a lexicographic one, letting an authenticated TURN client bypass `denied-peer-ip`/`allowed-peer-ip` IPv6 ranges (TURN-specific SSRF)

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addrlesseq in src/client/nsturnioaddr.c uses a component-wise comparison for native IPv6 min-max intervals in ioaaddrinrange, allowing an authenticated TURN client to relay to an IPv6 peer that is numerically...

EUVD-2026-56789

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, goodpeeraddr in src/server/nsturnserver.c uses ioaaddrinrange in src/client/nsturnioaddr.c without canonicalizing IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms, allowing an authenticated RFC 6062 T...

CVE-2026-73212 coturn peer-IP ACL canonicalization & scope bypass on the RFC 6062 TCP CONNECT relay path → internal-network SSRF and proven internal root RCE

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, goodpeeraddr in src/server/nsturnserver.c uses ioaaddrinrange in src/client/nsturnioaddr.c without canonicalizing IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms, allowing an authenticated RFC 6062 T...