Windows TCP/IP Denial of Service Vulnerability

nilesh dalavi nilesh dalavi

nilesh dalavi

Technical Director & Co-Owner at Reconshell

Published Apr 11, 2021
+ Follow

Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.

CVE-2021-24086

This is a proof of concept for CVE-2021-24086 (“Windows TCP/IP Denial of Service Vulnerability “), a NULL dereference in tcpip.sys patched by Microsoft in February 2021. According to this tweet, the vulnerability has been found by @piazzt. It is triggerable remotely by sending malicious UDP packet over IPv6.

You can read Microsoft’s blog here: Multiple Security Updates Affecting TCP/IP: CVE-2021-24074, CVE-2021-24094, and CVE-2021-24086. It discusses briefly the impact and workaround/mitigations.




To view or add a comment, sign in

More articles by nilesh dalavi

  • RedCloud OS
    Jul 8, 2023

    RedCloud OS

    Intro RedCloud OS is a Debian based Cloud Adversary Simulation Operating System for Red Teams to assess the security of…

  • WordPress Social Login and Register Authentication Bypass
    Jun 30, 2023

    WordPress Social Login and Register Authentication Bypass

    WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) = 7.6.

  • Wireless Pentesting Cheat Sheet
    Jun 27, 2023

    Wireless Pentesting Cheat Sheet

    This repository was originally made as a CheatSheet for OSWP Examination by Offensive Security. With the time…

  • Kali Linux Cheat Sheet
    Apr 21, 2023

    Kali Linux Cheat Sheet

    Kali Linux Cheat Sheet for Penetration Testers Recon and Enumeration NMAP Commands Nmap (“Network Mapper”) is a free…

  • Data Science Interview Preparation
    Apr 12, 2023

    Data Science Interview Preparation

    Data Science Interview Preparation Resources to help you to prepare for your coming data science interviews

  • Tools and Techniques for Red Team
    Dec 26, 2022

    Tools and Techniques for Red Team

    Tools and Techniques for Red Team / Penetration Testing This github repository contains a collection of tools and…

    1 Comment
  • MySQL Cheat Sheet
    Dec 21, 2022

    MySQL Cheat Sheet

    I have a terrible memory so this is a cheat sheet

  • process injection enumeration tool
    Dec 20, 2022

    process injection enumeration tool

    Wanderer Wanderer is an open-source program that collects information about running processes. This information…

  • Industrializing Financial Services with DevOps
    Dec 19, 2022

    Industrializing Financial Services with DevOps

    In recent years, large financial services institutions have been embracing the concept of DevOps at the core of their…

  • SSH based reverse shell
    Dec 18, 2022

    SSH based reverse shell

    Reverse SSH Want to use SSH for reverse shells? Now you can. Manage and connect to reverse shells with native SSH…

See all articles

Insights from the community

Others also viewed

Explore topics