CVE-2023-1206

2023-06-3000:00:00

CWE-400

redhat

www.cve.org

cve-2023-1206

ipv6

hash collision

linux kernel

syn flood attack

cpu usage

server

local network

high bandwidth

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Kernel",
    "versions": [
      {
        "version": "kernel 6.5-rc1",
        "status": "affected"
      }
    ]
  }
]