Fedora 45 : nsd (2026-c56ac69334)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c56ac69334 advisory. BUG FIXES: Fix for CVE-2026-18664: IP range access control restrictions are bypassed for some unintended IP. Thanks to Qifan Zhang, Palo Alto Networ...

CVE-2026-18916

Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the remote client can denial all TCP service to this NSD instance...

CVE-2026-18916

NSD (NLnet Labs) DNS server is vulnerable to a remote TCP denial-of-service : any unauthenticated network client can crash a serve child process by throttling the TCP receive window after issuing a TCP query. By repeatedly crashing serve children, an attacker can deny all TCP service to the affec...

CVE-2026-18916 Remote TCP DoS by throttling the TCP receive window

Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the remote client can denial all TCP service to this NSD instance...

CVE-2026-18916 Remote TCP DoS by throttling the TCP receive window

Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the remote client can denial all TCP service to this NSD instance...

Socomec DIRIS Digiware M-70 安全漏洞

The Socomec DIRIS Digiware M-70 is a multipoint temperature measurement module from Socomec France. A security vulnerability exists in Socomec DIRIS Digiware M-70 version 1.6.9, which originates from a denial-of-service vulnerability in the Modbus TCP function, which could lead to service...

CVE-2024-37662

TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

CVE-2024-37664

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

CVE-2024-37662

TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

CVE-2024-37664

The Redmi router RB03 (version 1.0.57 ) is vulnerable to TCP DoS or hijacking attacks . An attacker residing on the same WLAN as the victim can exploit this by sending forged TCP RST messages to evict NAT mappings within the router. This action allows the attacker to either disconnect the victim ...

CVE-2024-37664

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

Cisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod Multi-Site TCP DoS (cisco-sa-n9kaci-tcp-dos-YXukt6gM)

According to its self-reported version, Cisco NX-OS System Software in ACI Mode is affected by a denial of service vulnerability. The vulnerability exists in Application Centric Infrastructure ACI mode of Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches. ...

Arista Networks EOS/vEOS SegmentSmack TCP DoS (SA0036)

The version of Arista Networks EOS or vEOS running on the remote device is affected by a denial of servics DoS vulnerability. A flaw named SegmentSmack was found in the way the Linux kernel handles specially crafted TCP packets. An unauthenticated, remote attacker can use this flaw to trigger tim...

Still no fix for TCP DoS weakness

Software vendors and security officials in several countries have been working for nearly six months on a fix for a serious flaw in a number of TCP implementations that caused a lot of controversy and speculation last fall. The problem could allow attackers to consume all of the resources on a...