Lucene search
+L

20 matches found

Kitploit
Kitploit
•added 2026/09/25 6:41 p.m.•22 views

CVE-2023-0179-PoC

Needle CVE-2023-0179 エクスプロイト このリポジトリには、nftables サブシステムにおける私が最近発見した脆弱性(CVE-2023-0179 が割り当てられ、Linux バージョン 5.5 から 6.2-rc3 のすべてに影響します。ただし、エクスプロイトは 6.1.6 でテストしました)のエクスプロイトが含まれています。 脆弱性の詳細と解説は oss-security にあります。 ビルド手順 対応する実行可能ファイルを生成するには、make needle コマンドを実行するだけです。 ビルドを成功させるには libmnl と libnftnl が必要です:...

7.8CVSS7AI score0.01944EPSS
SaveExploits5References1
Kitploit
Kitploit
•added 2026/09/25 6:28 p.m.•21 views

CVE-2023-0179-PoC

Needle CVE-2023-0179 エクスプロイト このリポジトリには、nftables サブシステムで最近発見した脆弱性のエクスプロイトが含まれています。この脆弱性は CVE-2023-0179 として割り当てられ、Linux のバージョン 5.5 から 6.2-rc3 のすべてに影響します(エクスプロイトは 6.1.6 でテスト済みです)。 脆弱性の詳細とライトアップは oss-security にあります。 ビルド手順 make needle コマンドを実行するだけで、対応する実行ファイルが生成されます。 ビルドを成功させるには libmnl と libnftnl が必要です...

7.8CVSS7AI score0.01944EPSS
SaveExploits5References1
SUSE CVE
SUSE CVE
•added 2026/08/18 4:53 p.m.•12 views

SUSE CVE-2026-74579

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

5.6AI score0.00171EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/17 6:19 a.m.•15 views

CVE-2026-74579

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

7.1CVSS0.00171EPSS
SaveExploits0References8
OSV
OSV
•added 2026/08/17 6:19 a.m.•11 views

AZL-96600 CVE-2026-74579 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

7.1CVSS5.8AI score0.00171EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/17 6:19 a.m.•11 views

UBUNTU-CVE-2026-74579

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

7.1CVSS5.5AI score0.00171EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2026/08/17 6:19 a.m.•20 views

CVE-2026-74579

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

7.1CVSS5.5AI score0.00171EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/08/17 5:28 a.m.•10 views

EUVD-2026-60050

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

5.5AI score0.00171EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/08/17 5:28 a.m.•38 views

CVE-2026-74579

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

5.3AI score0.00171EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2026/08/17 5:28 a.m.•43 views

CVE-2026-74579 netfilter: nft_payload: fix mask build for partial field offload

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

7.1CVSS0.00171EPSS
SaveExploits0References8
OSV
OSV
•added 2026/08/17 5:28 a.m.•47 views

CVE-2026-74579 netfilter: nft_payload: fix mask build for partial field offload

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

7.1CVSS5.6AI score
SaveExploits0References11
CVE
CVE
•added 2026/08/17 5:28 a.m.•169 views

CVE-2026-74579

CVE-2026-74579 is a vulnerability in the Linux kernel 's netfilter subsystem, specifically in the nft_payload_offload_mask() function within nft_payload.c. When building an offload match mask for a partial IPv6 address match (e.g., field_len=16, priv_len=1), the code performs a shift of 1 <

7.1CVSS5.5AI score0.00171EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/08/17 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-74579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only pa...

7.1CVSS5.8AI score0.00171EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•1 views

CVE-2026-74579: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

7.1CVSS5.8AI score0.00171EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•11 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990332)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990332 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits If the offset + lengt...

7.8CVSS6.4AI score0.01944EPSS
SaveExploits5References4
Redos
Redos
•added 2025/06/23 12:00 a.m.•13 views

ROS-20250623-01

The vulnerability of the nftpayload function of the net/netfilter /nftpayload.c module of the netfilter component of the Linux kernel is related to the operation exceeding the memory buffer boundary. of Linux operating system is related to the operation exceeding the buffer boundaries in memory...

7.8CVSS6AI score0.00197EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•0 views

CVE-2023-53033: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits If the offset + length goes over the ethernet + vlan header, then the length is adjusted to copy the bytes that are within the boundaries of the vlanethh...

7.8CVSS6.1AI score0.00197EPSS
SaveExploits0References5
CVE
CVE
•added 2024/11/09 10:14 a.m.•209 views

CVE-2024-50251

CVE-2024-50251 is a Linux kernel netfilter nft_payload vulnerability. The issue arises when nft_payload sanitization of offset and length fails, allowing skb_checksum() to access beyond the sk_buff boundary if offset+length exceeds the skb length, triggering a BUG_ON(). Connected advisories confi...

6.2CVSS6AI score0.00534EPSS
SaveExploits1References14Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/09 12:00 a.m.•0 views

CVE-2024-50251: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: sanitize offset and length before calling skbchecksum If access to offset + length is larger than the skbuff length, then skbchecksum triggers BUGON. skbchecksum internally subtracts the length parameter...

6.2CVSS5.9AI score0.00534EPSS
SaveExploits1References1
OSV
OSV
•added 2023/02/13 5:51 p.m.•17 views

GSD-2023-1002196 netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

7.2AI score
SaveExploits0
Rows per page
Query Builder