PT-2017-7767 · Ietf+2 · Ipv6+2

Publicado 2017-01-14 · Atualizado 2018-05-11 · CVE-2016-10142

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IPv6 (affected versions not specified)

Description An issue in the IPv6 protocol specification allows an attacker to leverage the generation of IPv6 atomic fragments, triggering the use of fragmentation in an arbitrary IPv6 flow. This can lead to fragmentation-based attacks against legacy IPv6 nodes that do not implement RFC6946. Even nodes that implement RFC6946 can be subject to Denial of Service (DoS) attacks due to the generation of IPv6 atomic fragments. An attacker can send a forged ICMPv6 PTB error message to trigger the generation of IPv6 atomic fragments, resulting in a DoS scenario when these packets are dropped.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

CESA-2017_0817

CVE-2016-10142

RHSA-2017:0817

RHSA-2017_0817

Produtos afetados

Centos

Ipv6

Red Hat

Referências · 46

• 🔥 https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7042 · Nota de Segurança
• https://linux.oracle.com/errata/ELSA-2017-3534.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2016-2384 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2384 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10088 · Nota de Segurança
• https://linux.oracle.com/errata/ELSA-2017-3535.html · Aviso do Fabricante
• http://securityfocus.com/bid/95797 · Nota
• https://support.f5.com/csp/article/K57211290?utm_source=f5support&amp%3Butm_medium=RSS · Nota
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-10142 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2016-7042 · Nota
• https://access.redhat.com/errata/RHSA-2017:0817 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2069 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2016-8399 · Nota