Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Heap Overflow in OpenBSD's slaacd via Router Advertisement

blog.quarkslab.com | research | #vulnerability | #ipv6 | #heap-overflow | #openbsd | #slaacd | #router-advertisement

Summary

Analysis of a heap overflow in OpenBSD's slaacd: a malformed domain label in a Router Advertisement DNSSL option, patched in March 2022, with a proof-of-concept provided.
Published
Collected

original ↗

Related coverage

  1. Bad Neighbor on FreeBSD: IPv6 Router Advertisement Vulnerabilities in rtsold (CVE-2020-25577) (blog.quarkslab.com)
  2. PixieFail: Nine vulnerabilities in Tianocore's EDK II IPv6 network stack. (blog.quarkslab.com)
  3. Hack the Elephant One Bite at a Time: JPEG-Related Memory-Safety Bugs in PHP (swarm.ptsecurity.com)
  4. NGINX Rift: Achieving NGINX Remote Code Execution via an 18-Year-Old Vulnerability (depthfirst.com)
  5. dinosn/givewp-cve-2026-82222-rce-lab: GiveWP CVE-2026-82222 RCE Docker Lab & PoC (github.com)
  6. Route of Root: Bring a "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF (nebusec.ai)

back