Beveiligingsadvies

CVE-2008-0177

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2008-02-07 21:00:00
Laatst bijgewerkt 2024-08-07 07:39:35
Toegewezen door certcc
CVSS-score geen score
Status PUBLISHED

Beschrijving

The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.