https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:24:47 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05300 bdu:2023-05300 https://cve.radiocsirt.org/vuln/bdu:2023-05300 https://cve.radiocsirt.org/vuln/euvd-2026-216931 EUVD-2026-216931 https://cve.radiocsirt.org/vuln/euvd-2026-216931 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4809 <p>In pf packet processing with a &#39;scrub fragment reassemble&#39; rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed. That is, a packet with multiple fragment extension headers would not be recognized as the correct ultimate payload. Instead a packet with multiple IPv6 fragment headers would unexpectedly be interpreted as a fragmented packet, rather than as whatever the real payload is.</p> <p>As a result, IPv6 fragments may bypass pf firewall rules written on the assumption all fragments have been reassembled and, as a result, be forwarded or processed by the host.</p> <p>In pf packet processing with a &#39;scrub fragment reassemble&#39; rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed. That is, a packet with multiple fragment extension headers would not be recognized as the correct ultimate payload. Instead a packet with multiple IPv6 fragment headers would unexpectedly be interpreted as a fragmented packet, rather than as whatever the real payload is.</p> <p>As a result, IPv6 fragments may bypass pf firewall rules written on the assumption all fragments have been reassembled and, as a result, be forwarded or processed by the host.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-4809 https://cve.radiocsirt.org/vuln/ghsa-g6hh-x63c-83gf <p>In pf packet processing with a &#39;scrub fragment reassemble&#39; rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed. That is, a packet with multiple fragment extension headers would not be recognized as the correct ultimate payload. Instead a packet with multiple IPv6 fragment headers would unexpectedly be interpreted as a fragmented packet, rather than as whatever the real payload is.</p> <p>As a result, IPv6 fragments may bypass pf firewall rules written on the assumption all fragments have been reassembled and, as a result, be forwarded or processed by the host.</p> <p>In pf packet processing with a &#39;scrub fragment reassemble&#39; rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed. That is, a packet with multiple fragment extension headers would not be recognized as the correct ultimate payload. Instead a packet with multiple IPv6 fragment headers would unexpectedly be interpreted as a fragmented packet, rather than as whatever the real payload is.</p> <p>As a result, IPv6 fragments may bypass pf firewall rules written on the assumption all fragments have been reassembled and, as a result, be forwarded or processed by the host.</p> https://cve.radiocsirt.org/vuln/ghsa-g6hh-x63c-83gf https://cve.radiocsirt.org/vuln/gsd-2023-4809 gsd-2023-4809 https://cve.radiocsirt.org/vuln/gsd-2023-4809 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2281 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in FreeBSD Project FreeBSD OS ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in FreeBSD Project FreeBSD OS ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2281