CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – 임베디드 TLS 인증서 파서의 스택 버퍼 오버플로우 개요 널리 사용되는 경량 TLS 라이브러리시뮬레이션에는 조작된 길이 필드가 포함된 X.509 인증서 Subject Alternative Name 확장을 파싱할 때 스택 버퍼 오버플로우가 존재합니다. 심각도: Critical IoT/산업용 장치에서의 RCE 취약한 C 파서 및 익스플로잇 // tlsx509vuln.c include include include include // Vulnerable certificate parser struct...

ipxe

iPXE 네트워크 부트로더 iPXE는 선도적인 오픈 소스 네트워크 부트 펌웨어입니다. 다음과 같은 추가 기능으로 강화된 완전한 PXE 구현을 제공합니다: HTTP 또는 HTTPS를 통한 웹 서버 부팅, iSCSI, FCoE 또는 AoE SAN 부팅, 스크립트를 통한 부팅 프로세스 제어, 대화형 양식 및 메뉴 생성. iPXE를 사용하여 네트워크 카드의 기존 PXE ROM을 교체하거나, 리플래싱의 번거로움 없이 iPXE를 체인로드하여 iPXE 기능을 얻을 수 있습니다. iPXE는 GNU GPL 일부는 GPL 호환 라이선스 하에...

CVE-2022-28171-POC

CVE-2022-28171-POC 이 글은 원래 ExploitDB에 게시했으며, 다음 주소에서 확인할 수 있습니다: https://www.exploit-db.com/exploits/51607 Hikvision Hybrid SAN Ds-a71024 Firmware - 다중 원격 코드 실행 Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Reference Link: https://cve.report/CVE-2022-28171 Vulnerable Version...

CVE-2021-21985

CVE-2021-21985 vSphere ClientHTML5는 기본적으로 vCenter Server에서 활성화되는 Virtual SAN Health Check 플러그인의 입력 유효성 검사 부족으로 인한 원격 코드 실행 취약점을 포함하고 있습니다. VMware는 이 문제의 심각도를 CVSSv3 기본 점수 최대 9.8의 Critical 범위로 평가했습니다. 포트 443에 대한 네트워크 액세스 권한을 가진 악의적인 행위자는 이 문제를 악용하여 vCenter Server를 호스팅하는 기본 운영 체제에서 무제한 권한으로 명령을 실행할...

CVE-2021-21985_PoC

CVE-2021-21985 취약한 코드 CLASS/METHODs 사용 가능, PoC 목적의 작은 샘플: com.vmware.vsan.client.services.capability.VsanCapabilityProvider ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported getIsEncryptionSupported getIsLocalDataProtectionSupportedOnVc...

ServiceNow - Cross-Site Scripting

ServiceNow through San Diego Patch 4b and Patch 6 contains a cross-site scripting vulnerability in the logout functionality, which can enable an unauthenticated remote attacker to execute arbitrary JavaScript. id: CVE-2022-38463 info: name: ServiceNow - Cross-Site Scripting author: amanrawat...

crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

A flaw was found in the crypto/x509 package of golang. This vulnerability allows a remote attacker to cause a Denial of Service DoS by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name SAN entries. The certificate verification process, specifical...

CVE-2021-21985_PoC

취약점 세부 정보 VMWARE VCENTER SERVER VIRTUAL SAN HEALTH CHECK PLUG-IN RCE CVE-2021-21985 vSphere ClientHTML5에는 vCenter Server 플러그인에 원격 코드 실행 취약점이 있습니다. 포트 443에 네트워크로 접근할 수 있는 악의적인 공격자는 이 문제를 악용하여 vCenter Server를 호스팅하는 기본 운영 체제에서 무제한 권한으로 명령을 실행할 수 있습니다. 이 취약점은 VMware vCenter Server7.x7.0 U2b 이전, 6.76....

BIT-PHP-MIN-2026-91769 TLS Hostname Verification Falls Back to CN After SAN Mismatch

PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once the certificate presents any service identity, so a certificate carrying a non-matching DNS SAN w...

Rocky Linux 10.0 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (crlsa-2025_16115)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202516115 advisory. gnutls: Vulnerability in GnuTLS certtool template parsing CVE-2025-32990 gnutls: Vulnerability in GnuTLS SCT extension parsing CVE-2025-32989 gnutls:...

Rocky Linux 9 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (crlsa-2025_16116)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202516116 advisory. gnutls: Vulnerability in GnuTLS certtool template parsing CVE-2025-32990 gnutls: Vulnerability in GnuTLS SCT extension parsing CVE-2025-32989 gnutls:...

Rocky Linux 10.2 [CIQ] Security Update: go-fdo-client / go-fdo-client-debuginfo / go-fdo-client-debugsource (crlsa-2026_46394)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202646394 advisory. crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries CVE-2026-27145 Tenable has extracted the preceding...

AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1783955624)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783955624 advisory. - x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused...

Rocky Linux 9 [CIQ] Security Update: skopeo / skopeo-debuginfo / skopeo-debugsource / skopeo-tests Multiple Vulnerabilities (crlsa-2026_36317)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202636317 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive...

Rocky Linux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1783955624)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783955624 advisory. - x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused...

Rocky Linux 8 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (crlsa-2025_17415)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202517415 advisory. gnutls: Vulnerability in GnuTLS certtool template parsing CVE-2025-32990 gnutls: Vulnerability in GnuTLS otherName SAN export CVE-2025-32988 gnutls: NULL...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2026:1784188646)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784188646 advisory. - x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused...

Rocky Linux 9.6 [TuxCare] Security Update: skopeo / skopeo-tests (ALMALINUX9.6:CLSA-2026:1784190453)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784190453 advisory. - x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused...

Linux Distros Unpatched Vulnerability : CVE-2026-89134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-D...

CVE-2026-89134

A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert-subjectCN != NULL && cert-altNames == NULL && !cert-isCA instead of "no dNSName SAN", so an out-of-scope CN...