oss-sec mailing list archives

CVE Request : IPv6 Hop limit lowering via RA messages


From: "D.S. Ljungmark" <ljungmark () modio se>
Date: Thu, 2 Apr 2015 19:19:45 +0200

An unprivileged user on a local network can use IPv6 Neighbour
Discovery ICMP to broadcast a non-route with a low hop limit, this
causing machines to lower the hop limit on existing IPv6 routes.

Linux Patch: http://www.spinics.net/lists/netdev/msg322361.html
Redhat bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1203712

Projects impacted:  Linux kernel,  NetworkManager, FreeBSD Kernel


Regards,
  D.S. Ljungmark


Current thread: