CVE-2020-1350

CVE-2020-1350 SigRED DNS 서버의 TCP 수신 패킷 크기 최대 한도를 줄이고 DNS를 다시 시작하여 취약점의 영향을 완화하기 위한 해결 방법...

DNS-Poisoning-Triage-Lab

DNSおよびARPトラフィックトリアージラボ Arch Linuxワークステーション上で実施された、教育用パケット解析とリゾルバ強化演習です。 Scope: このリポジトリは学習プロジェクトです。含まれているキャプチャはDNSおよびARPインスペクションの練習に有用ですが、それ自体がアクティブなキャッシュポイズニング攻撃、悪意のあるハードウェア、特定のCVEの悪用、またはNetworkManagerルーティングメトリックへの因果関係を証明するものではありません。 このプロジェクトを改訂した理由...

Detection-and-Mitigation-for-CVE-2022-2639

Detection-and-Mitigation-for-CVE-2022-2639 설명 Open vSwitch 커널 모듈은 선택된 네트워크 장치에서 flow 수준 패킷 처리를 유연하게 사용자 공간에서 제어할 수 있게 해줍니다. 일반 이더넷 스위치, 네트워크 장치 본딩, VLAN 처리, 네트워크 접근 제어, flow 기반 네트워크 제어 등을 구현하는 데 사용할 수 있습니다. 공격을 방지하려면 사용하지 않을 경우 이 커널 모듈을 비활성화하는 것이 좋습니다. 설치 wget...

ipmi

I wrote some software to explore IPMI; here are some of results. I thought I'd do the usual detect, get data, and audit sort of cycle. Each of these turned out to be fairly interesting problem on its own, at least to me. BTW/FYI - I released a new tool to explore IPMI -...

CVE-2023-44487-dos

CVE-2023-44487 HTTP/2 Rapid Reset 이 리포지토리에는 영향을 분석하기 위해 완전히 테스트되지 않은 예제가 몇 가지 있지만, 저는 이 공격의 개념많은 스트림을 시작하고 즉시 RSTSTREAM 프레임을 보내 MAXCONCURRENTSTREAMS에 도달하는 것을 방지하는 것을 수행하고자 했습니다. 저는 Single Packet Attack을 악용하기 위해 만든 H2SpaceX 저수준 HTTP/2 라이브러리를 사용합니다. 100,000개의 POST 요청을 단일 패킷 공격 기법으로 전송하여 서버가 마지막 바이트...

CVE-2026-38698-and-CVE-2026-38699

Wyze Cam Pan v3 연구 슬라이드 참조 CVE-2026-38698 공격 이름 tutkavserver의 tutkpacketalloc 함수에서 발생하는 힙 오버플로우 추가 세부 정보 영향을 받는 제품 TUTK SDK v.3.1.10.0 v.4.3.8.1 영향을 받는 구성 요소 tutkpacketAlloc 함수 공격 벡터 인증된 공격자는 복호화된 UDP 페이로드에서 파생된 조작된 대형 AV 패킷을 포트 32761로 전송해야 합니다. 참조 보고서 동영상 pocheapoverflow POC poc CVE-2026-38699 공...

AZL-106224 CVE-2026-98233 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

DEBIAN-CVE-2026-98233

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

CVE-2026-98233

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

CVE-2026-98233

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

CVE-2026-98233

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

CVE-2026-98233 net/packet: clear RX owner on VNET header error

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

CVE-2026-98233

The Linux kernel contains a vulnerability in net/packet where the tpacket_rcv() function fails to release a claimed V1 or V2 ring slot if the virtio-net header conversion fails. This error path leaves the ownership bit set, which can cause an issue where an unsupported UDP GSO packet renders the ...

CVE-2026-98233 net/packet: clear RX owner on VNET header error

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

EUVD-2026-93161

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

etherleak-checker

Etherleak 취약점 검사기 이 Python 스크립트는 네트워크 패킷의 패딩 데이터를 분석하여 대상 호스트에서 EtherleakCVE-2003-0001 취약점을 탐지하는 데 도움을 줍니다. 이 스크립트는 Scapy를 사용하여 다양한 유형의 요청ICMP, ARP 또는 TCP을 보내고, 응답에 중요한 메모리 내용을 유출할 수 있는 패딩 데이터가 포함되어 있는지 확인합니다. Etherleak 개요 Etherleak은 네트워크 드라이버가 이더넷 프레임을 남은 메모리로 부적절하게 패딩하는 취약점입니다. 공격자는 특정 요청ICMP,...

CLEANSTART-2026-ZF54924 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs

CVE-2026-46597 affects multiple packages. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs. See references for individual vulnerability details...

CVE-2026-104037

A vulnerability exists in SSSD where a local attacker can trigger a denial of service (DoS) . By sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket , the attacker can cause an integer underflow and an out-of-bounds memory read . This flaw leads t...

Wireshark 1.8.x < 1.8.13 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.13 advisory. - Buffer overflow in the mpegread function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x befo...

Wireshark 1.4.x < 1.4.14 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.14 advisory. - epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6....