PF_RING

PFRING™ Introduction PFRING™ is a Linux kernel module and user-space framework that allows you to process packets at high-rates while providing you a consistent API for packet processing applications. Who needs PFRING™? Basically everyone who has to handle many packets per second. The term ‘many’...

Detection-and-Mitigation-for-CVE-2022-2639

Detection-and-Mitigation-for-CVE-2022-2639 説明 Open vSwitch カーネルモジュールは、選択したネットワークデバイス上のフローレベルのパケット処理を、ユーザースペースから柔軟に制御できます。プレーンなイーサネットスイッチ、ネットワークデバイスのボンディング、VLAN 処理、ネットワークアクセス制御、フローベースのネットワーク制御などの実装に使用できます。攻撃を防ぐため、使用しない場合はこのカーネルモジュールを無効にすることをお勧めします。 インストール root@kitploit: wget...

CVE-2026-55200

🚨 CVE-2026-55200 - 치명적인 libssh2 버퍼 초과 쓰기 취약점 📌 개요 CVE-2026-55200 는 널리 배포된 libssh2 라이브러리에 영향을 미치는 치명적인 메모리 손상 취약점 입니다. 이 결함은 SSH 패킷 처리 중 패킷 길이 필드의 부적절한 검증으로 인해 발생하며, 원격 공격자가 힙 손상을 일으키고 특정 상황에서 원격 코드 실행RCE을 달성할 수 있습니다. 🔥 심각도 🎯 영향을 받는 소프트웨어 구성 요소| 영향받는 버전 ---|--- libssh2| = 1.11.1 🧠 기술 세부 사항 취약한 함수...

CVE-2026-63452

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli compression bombs a single flow can submit. With...

CVE-2026-73455: Improper Handling of Length Parameter Inconsistency

On affected platforms running Arista EOS with Open Shortest Path First version 3 OSPFv3 configured, a specially crafted packet can cause the OSPFv3 agent to restart unexpectedly...

CVE-2026-76685

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful...

EUVD-2026-79211

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful...

CVE-2026-76685

CVE-2026-76685 affects HPE Networking EdgeConnect SD-WAN Gateways in the proxy packet processing logic , where improper handling of malformed or truncated input triggers an integer overflow that escalates to a buffer overflow . An unauthenticated remote attacker can send specially crafted input t...

CVE-2026-76685: Integer Overflow or Wraparound

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful...

PT-2026-92445

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful...

Astra Linux – Vulnerability in Qemu

In QEMU versions up to 5.0.0, an assertion failure can occur during network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could exploit this flaw to terminate the QEMU process on the host, resulting in a denial-of-service condition in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: mwifiex: Fixed out-of-bounds access to the skb-data buffer during OOB operations and integer underflow when processing RX packets. Ensure that functions such as mwifiexprocessmgmtpacket, mwifiexprocessstarxpacket,...

CVE-2026-89479 sctp: stop processing a packet once its association is deleted

In the Linux kernel, the following vulnerability has been resolved: sctp: stop processing a packet once its association is deleted sctpendpointbhrcv looks the association up only when chunk-asoc is NULL, and caches the result in chunk-asoc and chunk-transport without taking a reference. A packet...

CVE-2026-18238

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

PT-2026-84467

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A daemon in AOS-CX improperly processes malformed input. An unauthenticated remote attacker can exploit this by sending specially crafted packets to the affected service, potentially leading t...

CVE-2026-74704

A flaw was found in the Linux kernel. The schcake ACK filter, responsible for processing network packets, contains a vulnerability. A remote attacker could send specially crafted malformed IP packets. This could lead to the system logging excessive warnings or, under specific configurations, caus...

EUVD-2026-63158

Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-74559

A flaw was found in the Linux kernel's AFXDP eXpress Data Path networking component. This vulnerability, located in the xskbuildskb function, involves improper handling of network packet descriptors. When processing large or malformed multi-buffer packets, the system fails to properly drain...

CVE-2026-72407

A flaw was found in the Geneve module of the Linux kernel. This vulnerability arises from an incorrect validation of the inner network offset within the genevegrocomplete function. A discrepancy between how genevegrocomplete and genevegroreceive process packet information can lead to an...

Linux Distros Unpatched Vulnerability : CVE-2026-72046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: gve: fix header buffer corruption with header-split and HW-GRO The DQO RX datapath programs ...