FreeBSD -- IPv6 Routing Header 0 is dangerous

Problem Description There is no mechanism for preventing IPv6 routing headers from being used to route packets over the same links many times. Impact An attacker can "amplify" a denial of service attack against a link between two vulnerable hosts; that is, by sending a small volume of traffic the...

Design/Logic Flaw

Cisco IOS allows remote attackers to cause a denial of service crash via a crafted IPv6 Type 0 Routing header...

CVE-2007-0481

CVE-2007-0481 affects Cisco IOS IPv6 handling, allowing remote attackers to crash devices by sending a crafted IPv6 Type 0 Routing header. The issue is a DoS with potential for device instability; exploitation requires sending a malicious IPv6 routing header to a Cisco IOS device. Connected docs ...

IPv6 Routing Header Vulnerability

...

[Full-disclosure] Cisco Security Advisory: IPv6 Routing Header Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: IPv6 Routing Header Vulnerability Advisory ID: cisco-sa-20070124-IOS-IPv6 http://www.cisco.com/warp/public/707/cisco-sa-20070124-IOS-IPv6.shtml Revision 1.0 For Public Release 2007 January 24 1600 UTC GMT -...

Cisco routers IPv6 DoS

Router crash on parsing IPv6 packet RH routing header...

CVE-2006-6263

Teredo clients, when source routing is enabled, recognize a Routing header in an encapsulated IPv6 packet and send the packet to the next hop, which might allow remote attackers to bypass policies of certain Internet gateways that drop all source-routed packets...

CVE-2006-6263

Teredo clients, when source routing is enabled, recognize a Routing header in an encapsulated IPv6 packet and send the packet to the next hop, which might allow remote attackers to bypass policies of certain Internet gateways that drop all source-routed packets...