Описание
The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.
Ссылки
- Vendor Advisory
- PatchVendor Advisory
- Vendor Advisory
- US Government Resource
- Patch
- US Government Resource
Уязвимые конфигурации
EPSS
7.8 High
CVSS2
Дефекты
Связанные уязвимости
The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.
The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME ...
The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.
EPSS
7.8 High
CVSS2