CVE-2025-32400

An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet...

CVE-2025-32405

RT-Labs P-Net is a PROFINET stack. CVE-2025-32405 describes an Out-of-bounds Write in P-Net v1.0.1 and earlier that can crash IO devices by sending a malicious RPC packet. The issue is a memory write beyond the connection buffer, leading to device disruption (DoS). Exploitation is via network acc...

CVE-2025-32404

CVE-2025-32404 describes an out-of-bounds write in RT-Labs P-Net prior to or at 1.0.1 that can corrupt the memory of IO devices using the library when a malicious RPC packet is sent. The issue affects RT-Labs P-Net versions 1.0.1 and earlier and is exploitable over network, enabling memory corrup...

CVE-2025-32397

CVE-2025-32397 describes a heap-based buffer overflow in RT-Labs P-Net

CVE-2025-32397

An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet...

CVE-2025-32396

CVE-2025-32396 describes a heap-based buffer overflow in RT-Labs P-Net (versions ≤ 1.0.1) that can crash IO devices using the library when a malicious RPC packet is sent. The vulnerability is network-exploitable via the RPC endpoint; no exploit details are provided in the documents. Connected sou...

Log Spoofing Source Routing and Redirect Packets

Logging spoofing, source routing, and redirect packets sent to the system helps discover attack sources and formulate protection measures. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Configure the iptables Policies for Loopback Properly

The loopback address 127.0.0.0/8 is a special address on a server. It is irrelevant to NICs and is mainly used for the inter-process communication of a local device. Packets with the source address 127.0.0.0/8 from NICs should be discarded. If policies related to the loopback address are improper...

PT-2025-20027 · Rt · Rt-Labs P-Net

Name of the Vulnerable Software and Affected Versions: RT-Labs P-Net versions 1.0.1 and earlier Description: The issue allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet. This is due to an out-of-bounds write in the affected software...

Discard Forged ICMP Packets and Do Not Record Logs

Setting icmpignoreboguserrorresponses to 1 prevents the kernel from recording responses to duplicate broadcast packets, which prevents useless log information from filling in the file system. Some attackers send ICMP packets that violate RFC-1122 and attempt to fill the log file system with a lar...

PT-2025-20025 · Rt · Rt-Labs P-Net

Name of the Vulnerable Software and Affected Versions: RT-Labs P-Net versions 1.0.1 and earlier Description: A heap-based buffer overflow in RT-Labs P-Net allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet. Recommendations: For RT-Labs...

Disable the System from Responding to ICMP Broadcast Packets

Internet Control Message Protocol ICMP transmits query packets and error packets. You can configure a policy of not receiving ICMP broadcast packets to defend against ICMP packet attacks. This parameter determines whether a device needs to respond to the ICMP echo messages and timestamp requests...

io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

A flaw was found in Netty's SslHandler. This vulnerability allows a native crash via a specially crafted packet that bypasses proper validation...

io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

A flaw was found in Netty's SslHandler. This vulnerability allows a native crash via a specially crafted packet that bypasses proper validation...

io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

A flaw was found in Netty's SslHandler. This vulnerability allows a native crash via a specially crafted packet that bypasses proper validation...

io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

A flaw was found in Netty's SslHandler. This vulnerability allows a native crash via a specially crafted packet that bypasses proper validation...

qemu-kvm: net: assertion failure in update_sctp_checksum()

A flaw was found in QEMU. An assertion failure was present in the updatesctpchecksum function in hw/net/nettxpkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw allows a malicious guest to crash QEMU and cause a denial of service condition...

USN-7478-1 corosync vulnerability

It was discovered that Corosync incorrectly handled certain large UDP packets. If encryption is disabled, or an attacker knows the encryption key, this issue could be used to cause Corosync to crash, resulting in a denial of service...

USN-7478-1: Corosync vulnerability

It was discovered that Corosync incorrectly handled certain large UDP packets. If encryption is disabled, or an attacker knows the encryption key, this issue could be used to cause Corosync to crash, resulting in a denial of service...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Corosync vulnerability (USN-7478-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7478-1 advisory. It was discovered that Corosync incorrectly handled certain large UDP packets. If encryption is disabled, or an attacker knows the...