CVE-2008-0177 The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to caus...
HighCVSS 7.8
EPSS 15.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kame ipcomp | All versions | No fix listed |
References
- cvsweb.netbsd.org vendor-advisory
- APPLE-SA-2008-07-11 vendor-advisory
- APPLE-SA-2008-05-28 vendor-advisory
- 28788 patch third-party-advisory vendor-advisory
- 28816 third-party-advisory vendor-advisory
- 28979 third-party-advisory
- 29130 third-party-advisory
- 30430 third-party-advisory
- 31074 third-party-advisory
- FreeBSD-SA-08:04 vendor-advisory
- 1019314 vdb-entry
- www.kame.net
- VU#110947 third-party-advisory us-government-resource
- 27642 patch vdb-entry
- TA08-150A third-party-advisory us-government-resource
- ADV-2008-0441 vdb-entry
- ADV-2008-0688 vdb-entry
- ADV-2008-1697 vdb-entry
- ADV-2008-2094 vdb-entry
- 5191 exploit