https://netacoding.com/tags/nic-dma-leak/ Recent content in NIC-DMA-Leak on Netacoding | Cybersecurity, Assembly & Network Research https://netacoding.com/img/logo-netacoding.png https://netacoding.com/img/logo-netacoding.png Hugo en-us Mon, 01 Jun 2026 00:00:00 +0000 https://netacoding.com/posts/ghost-leak/ Mon, 01 Jun 2026 00:00:00 +0000 https://netacoding.com/posts/ghost-leak/ ArubaOS 8.13.2.0 leaks up to 18 bytes of NIC DMA buffer per ICMP Echo via inflated IP Total Length (CWE-126). TTL=0 packets are processed in violation of RFC 791, making the attack invisible to IDS, firewalls, and SIEM. Same mechanism as CVE-2003-0001 and CVE-2021-3031 (Palo Alto PA-series). 27/27 packets confirmed via pcap. HPE Bugcrowd closed as N/A.