7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
0.018 Low
EPSS
Percentile
87.9%
Problem Description:
In case of an incoming ICMPv6 βPacket Too Big Messageβ, there
is an insufficient check on the proposed new MTU for a path to
the destination.
Impact:
When the kernel is configured to process IPv6 packets and has
active IPv6 TCP sockets, a specifically crafted ICMPv6 βPacket
Too Big Messageβ could cause the TCP stack of the kernel to
panic.
Workaround:
Systems without INET6 / IPv6 support are not vulnerable and
neither are systems which do not listen on any IPv6 TCP sockets
and have no active IPv6 connections.
Filter ICMPv6 βPacket Too Big Messagesβ using a firewall, but
this will at the same time break PMTU support for IPv6
connections.