CVE-2010-4563

2012-02-0200:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.003

Percentile

69.9%

JSON

The Linux kernel, when using IPv6, allows remote attackers to determine
whether a host is sniffing the network by sending an ICMPv6 Echo Request to
a multicast address and determining whether an Echo Reply is sent, as
demonstrated by thcping.

Bugs

<https://launchpad.net/bugs/927881>

Notes

Author	Note
henrix	no upstream fix yet. also, RH has rated this issue as having low security impact and is not planning to address it.
mdeslaur	this is a minor issue, we don’t plan on fixing this with a security update.