Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Bad Neighbor on FreeBSD: IPv6 Router Advertisement Vulnerabilities in rtsold (CVE-2020-25577)

blog.quarkslab.com | advisory | #rce | #vulnerability | #ipv6 | #router-advertisement | #freebsd | #cve-2020-25577

Summary

Details of four vulnerabilities in FreeBSD's rtsold(8) IPv6 router solicitation daemon, the worst allowing remote code execution as root from the same link; fixed in FreeBSD-SA-20:32.rtsold.
Published
Collected

original ↗

Related coverage

  1. Heap Overflow in OpenBSD's slaacd via Router Advertisement (blog.quarkslab.com)
  2. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  3. CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability (blog.viettelcybersecurity.com)
  4. CVE-2018-6924: FreeBSD ELF Header Parsing Kernel Memory Disclosure (blog.quarkslab.com)
  5. StyleSmuggler fix: patch the Magento and Adobe Commerce RCE (aikido.dev)
  6. Chamilo LMS... It's raining 0days, hallelujah, it's raining 0days (blog.quarkslab.com)

back