CVE-2020-16898-Bad-Neighbor

Simple policy to detect CVE-2020-16898: Bad Neighbor Las siguientes funcionalidades son proporcionadas por el script :: 1 El script verifica según la heurística descrita aquí: https://www.mcafee.com/blogs/other-blogs/mcafee-labs/cve-2020-16898-bad-neighbor/ Instalación root@kitploit: zeek-pkg...

Docker-Container-CVE-2020-13401

CVE-2020-13401 Study Study on CVE-2020-13401 vulnerability of containers in dockers older than 19.03.11 Containers that are created with Docker Engine versions before 19.03.11 are vulnerable to receive and apply fake RA Router Advertisement messages from other containers in the network. Receiving...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...

CVE-2020-10749

CVE-2020-10749 CVE-2020-10749 PoC Kubernetes MitM attacks via IPv6 rogue router advertisements For educational purposes only Requirements Kubernetes cluster with the following kubelet version kubelet v1.18.0-v1.18.3 kubelet v1.17.0-v1.17.6 kubelet mtu 1450 state UP inet6...

CVE-2020-16898

CVE-2020-16898: "Bad Neighbor" Puntuación CVSS: 8.8 Vector CVSS: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Resumen El 13 de octubre, Microsoft anunció una vulnerabilidad excepcionalmente crítica en la pila IPv6 de Windows, que permite a un atacante enviar paquetes maliciosamente...

EulerOS Virtualization 2.10.1 : radvd (EulerOS-SA-2026-3853)

According to the versions of the radvd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack...

CVE-2026-15893

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

CVE-2026-15893 Zephyr IPv6 Neighbor Discovery zero reachable time from crafted Router Advertisement causes assertion/DoS

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

EUVD-2026-77767

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

CVE-2026-15893 Zephyr IPv6 Neighbor Discovery zero reachable time from crafted Router Advertisement causes assertion/DoS

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

CVE-2026-15893 Zephyr IPv6 Neighbor Discovery zero reachable time from crafted Router Advertisement causes assertion/DoS

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

CVE-2026-15893

CVE-2026-15893 affects the Zephyr RTOS IPv6 Neighbor Discovery stack. The function net_if_ipv6_calc_reachable_time() in subsys/net/ip/net_if.c computes a randomized reachable time from base_reachable_time using integer division. When the Reachable Time field of an incoming Router Advertisement is...

Astra Linux – Vulnerability in libndp

A vulnerability was discovered in libndp. This flaw allows a local malicious user to trigger a buffer overflow in NetworkManager, by sending a malformed IPv6 router advertisement packet. This issue occurred because libndp did not properly validate the route length information...

PT-2026-91392

net if ipv6 calc reachable time in subsys/net/ip/net if.c derives a randomized ND reachable time from ipv6-base reachable time as min reachable + sys rand32 get % max reachable - min reachable, where min reachable = base/2 and max reachable = 3base/2 using integer division. When base reachable ti...

GRANDE-PS4-13.02

ps4 rtsold/CVE-2025-14558 exploits I have not achieved c...

CVE-2026-17255

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements...

CVE-2026-74598

A flaw was found in the Linux kernel's IPv6 networking stack. An off-by-one error in the validation of the Route Information option length RFC 4191 allows a remote attacker to craft a Router Advertisement RA packet. This crafted packet can cause the kernel to read up to 8 bytes beyond the intende...

EUVD-2026-64535

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

CVE-2026-12633 Out-of-bounds write in IPv6 6LoWPAN Context Option handling via unauthenticated Router Advertisement

The IPv6 neighbor-discovery code in subsys/net/ip/ipv6nbr.c processes the 6LoWPAN Context Option 6CO, RFC 6775 carried inside ICMPv6 Router Advertisements. In handlera6co the 8-bit contextlen field is taken directly from the packet and was never bounded to the RFC maximum of 128. The function...

CVE-2026-12633

CVE-2026-12633 is an out-of-bounds write in the Zephyr RTOS IPv6 neighbor-discovery code (subsys/net/ip/ipv6_nbr.c). The function handle_ra_6co() processes the 6LoWPAN Context Option (RFC 6775) from ICMPv6 Router Advertisements without bounding the 8-bit context_len field to the RFC maximum of 12...