Information disclosure in Linux Kernel

CVE-2010-4563

The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping.

Vulnerability class: Information Disclosure

EPSS: 0.030 (86.0th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (mailing-list, x_refsource_FULLDISC)
cve@mitre.org (mailing-list, x_refsource_MLIST)