PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Bad Neighbor on FreeBSD: IPv6 Router Advertisement Vulnerabilities in rtsold (CVE-2020-25577)

blog.quarkslab.com | advisory | #rce | #vulnerability | #ipv6 | #router-advertisement | #freebsd | #cve-2020-25577
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Details of four vulnerabilities in FreeBSD's rtsold(8) IPv6 router solicitation daemon, the worst allowing remote code execution as root from the same link; fixed in FreeBSD-SA-20:32.rtsold.
Published
Collected

Related coverage

research · blog.quarkslab.com
Heap Overflow in OpenBSD's slaacd via Router Advertisement
Analysis of a heap overflow in OpenBSD's slaacd: a malformed domain label in a Router Advertisement DNSSL option, patched in March 2022, with a proof-of-concept provided.
vulnerability · wiz.io
[CVE-2026-111497] Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
vulnerability · bugpwn.com
open62541: Integer Overflow → Heap Overflow → RCE.
Original research: how a 16 bit size field overflow in open62541's custom DataType machinery lets a malicious OPC UA server corrupt a connecting client's heap, up to remote code execution. CVE-2026-116014, CVSS 9.2. Root cause, networked PoC, and the official fix. By BUG|PWN.
advisory · blog.quarkslab.com
CVE-2018-6924: FreeBSD ELF Header Parsing Kernel Memory Disclosure
Analysis of CVE-2018-6924 (FreeBSD-SA-18:12): insufficient ELF header validation in the FreeBSD kernel lets a local unprivileged user leak kernel memory; with a fix walkthrough.
Critical · advisory · github.com
GHSA-9v8h-qqgm-4m35: Out-of-Bounds Write in Brotli Decoder ("Node2Shell") Affects Python & Node.js Ecosystems (CVE-2026-111497)
Because Brotli is ubiquitous across web servers, browsers, runtimes, and package registries, any application decompressing untrusted user-supplied payload with affected decoders is vulnerable to memory corruption or RCE.
Back