PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Analysis of a Windows IPv6 Fragmentation Vulnerability: CVE-2021-24086

blog.quarkslab.com | vulnerability | CVE-2021-24086 | #denial-of-service | #windows | #vulnerability | #ipv6 | #cve-2021-24086 | #fragmentation
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Analysis of CVE-2021-24086, a denial-of-service vulnerability in the Windows IPv6 stack caused by mishandling of IPv6 fragments, patched by Microsoft in February 2021, with a proof of concept.
CVE
CVE-2021-24086
Published
Collected

Related coverage

Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
vulnerability · blog.quarkslab.com
Snapshotting our way to CVE-2026-9539
This blog post presents a LibAFL-Qemu based way to explore state machines and why we failed to find CVE-2026-9539.
vulnerability · blog.quarkslab.com
MbedTLS Security Audit
At the request of the Open Source Technology Improvement Fund (OSTIF), Quarkslab performed a security audit of mbedTLS, evaluating the security of the changes in version 4.0.
vulnerability · blog.quarkslab.com
Remote Denial-of-Service on CycloneTCP : CVE-2021-26788
A vulnerability report on CVE-2021-26788, a remotely triggerable denial-of-service in the CycloneTCP embedded TCP/IP stack caused by zero-length TCP options causing an infinite loop; fixed in 2.0.2.
vulnerability · blog.quarkslab.com
Beware the Bad Neighbor: Analysis and PoC of the Windows IPv6 Router Advertisement Vulnerability (CVE-2020-16898)
Analysis and PoC of CVE-2020-16898 Bad Neighbor, a stack-based buffer overflow in the Windows IPv6 stack triggered by a malformed Router Advertisement, allowing potential remote code execution.
High · vulnerability · bishopfox.com
A Crash, Not a Shell: SolarWinds Serv-U CVE-2026-28318
Bishop Fox confirms CVE-2026-28318: one unauthenticated POST with a deflate Content-Encoding crashes SolarWinds Serv-U via heap corruption, but three probed RCE paths dead-end; HF1 fixes it.
Back