https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 12:22:38 +0000 https://vulnerability.circl.lu/vuln/bdu:2026-14157 bdu:2026-14157 https://vulnerability.circl.lu/vuln/bdu:2026-14157 https://vulnerability.circl.lu/vuln/fkie_cve-2026-67277 <p>RouterOS accepts a &#34;related&#34; btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With &#34;random-data=false&#34;, the sender transmits an uninitialized tail from a kernel packet buffer. A separate unchecked, inverted packet-size interval causes unsigned integer underflow, anomalously large fragmented output, and can restart the RouterOS kernel.</p> <p>This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)</p> <p>RouterOS accepts a &#34;related&#34; btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With &#34;random-data=false&#34;, the sender transmits an uninitialized tail from a kernel packet buffer. A separate unchecked, inverted packet-size interval causes unsigned integer underflow, anomalously large fragmented output, and can restart the RouterOS kernel.</p> <p>This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-67277 https://vulnerability.circl.lu/vuln/ghsa-6q2x-6fhj-r3w8 <p>RouterOS accepts a &#34;related&#34; btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With &#34;random-data=false&#34;, the sender transmits an uninitialized tail from a kernel packet buffer. A separate unchecked, inverted packet-size interval causes unsigned integer underflow, anomalously large fragmented output, and can restart the RouterOS kernel.</p> <p>This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)</p> <p>RouterOS accepts a &#34;related&#34; btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With &#34;random-data=false&#34;, the sender transmits an uninitialized tail from a kernel packet buffer. A separate unchecked, inverted packet-size interval causes unsigned integer underflow, anomalously large fragmented output, and can restart the RouterOS kernel.</p> <p>This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)</p> https://vulnerability.circl.lu/vuln/ghsa-6q2x-6fhj-r3w8 https://vulnerability.circl.lu/vuln/ncsc-2026-0345 NCSC-2026-0345 https://vulnerability.circl.lu/vuln/ncsc-2026-0345