Lucene search

K
freebsdFreeBSD275B845E-F56C-11DB-8163-000E0C2E438A
HistoryApr 26, 2007 - 12:00 a.m.

FreeBSD -- IPv6 Routing Header 0 is dangerous

2007-04-2600:00:00
vuxml.freebsd.org
13

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.154 Low

EPSS

Percentile

95.9%

Problem Description
There is no mechanism for preventing IPv6 routing headers
from being used to route packets over the same link(s) many
times.
Impact
An attacker can “amplify” a denial of service attack against
a link between two vulnerable hosts; that is, by sending a
small volume of traffic the attacker can consume a much larger
amount of bandwidth between the two vulnerable hosts.
An attacker can use vulnerable hosts to “concentrate” a
denial of service attack against a victim host or network;
that is, a set of packets sent over a period of 30 seconds
or more could be constructed such that they all arrive at
the victim within a period of 1 second or less over a
period of 30 seconds or more could be constructed such that
they all arrive at the victim within a period of 1 second or
less.
Other attacks may also be possible.
Workaround
No workaround is available.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd= 6.2UNKNOWN
FreeBSDanynoarchfreebsd< 6.2_4UNKNOWN

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.154 Low

EPSS

Percentile

95.9%