Design/Logic Flaw

2012-12-2111:47:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.6%

JSON

The ip6_frag_queue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network restrictions via overlapping IPv6 fragments.

CPENameOperatorVersion
linux_kerneleq2.6.32.5
linux_kerneleq2.6.35 rc4
linux_kerneleq2.6.35.10
linux_kerneleq2.6.33.7
linux_kerneleq2.6.32.48
linux_kerneleq2.6.31
linux_kerneleq2.6.31 rc4
linux_kerneleq2.6.32 rc1
linux_kerneleq2.6.31.9
linux_kerneleq2.6.36 rc2

Name	Operator	Version
linux_kernel	eq	2.6.32.5
linux_kernel	eq	2.6.35 rc4
linux_kernel	eq	2.6.35.10
linux_kernel	eq	2.6.33.7
linux_kernel	eq	2.6.32.48
linux_kernel	eq	2.6.31
linux_kernel	eq	2.6.31 rc4
linux_kernel	eq	2.6.32 rc1
linux_kernel	eq	2.6.31.9
linux_kernel	eq	2.6.36 rc2