CVE-2026-15813— Kronosnet 缓冲区错误漏洞

Kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation

A vulnerability was found in the network packet de-fragmentation engine of kronosnet (Version affected <= 1.34). The internal reassembly code does not properly validate sequence numbers of incoming payload fragments. An attacker can exploit this lack of verification by transmitting malformed packets with corrupted sequence parameters. Under specific conditions, this forces the packet processing layer to parse data outside the designated bounds of the internal memory structures, causing an out-of-bounds memory access or heap corruption. This behavior can result in sudden application crashes or system instability.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

跨界内存写

Kronosnet 缓冲区错误漏洞

Kronosnet Kronosnet是Kronosnet组织的一个网络抽象层，专为高可用性用例而设计，其中冗余、安全性、容错性和快速故障转移是核心要求。 Kronosnet 1.34及之前版本存在缓冲区错误漏洞，该漏洞源于网络数据包去碎片化引擎中的内部重组代码无法正确验证传入有效载荷片段的序列号，可能导致越界内存访问或堆损坏，从而导致应用程序崩溃或系统不稳定。

N/A

N/A