Vulnerability in Kame Ipcomp
CVE-2008-0177
The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.
EPSS: 0.155 (96.5th percentile) — read the EPSS interpretation.
Affected products
- Kame Ipcomp
- N/a — versions n/a
References
- cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
- cret@cert.org (Patch, vdb-entry, x_refsource_BID)
- cret@cert.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (x_refsource_FREEBSD, vendor-advisory)
- cret@cert.org (US Government Resource, x_refsource_CERT, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)