PT-2017-7767 · Ietf+2 · Ipv6+2

Published 2017-01-14 · Updated 2018-05-11 · CVE-2016-10142

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IPv6 (affected versions not specified)

Description An issue in the IPv6 protocol specification allows an attacker to leverage the generation of IPv6 atomic fragments, triggering the use of fragmentation in an arbitrary IPv6 flow. This can lead to fragmentation-based attacks against legacy IPv6 nodes that do not implement RFC6946. Even nodes that implement RFC6946 can be subject to Denial of Service (DoS) attacks due to the generation of IPv6 atomic fragments. An attacker can send a forged ICMPv6 PTB error message to trigger the generation of IPv6 atomic fragments, resulting in a DoS scenario when these packets are dropped.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Weakness Enumeration

CWE-17

Related Identifiers

CESA-2017_0817

CVE-2016-10142

RHSA-2017:0817

RHSA-2017_0817

Affected Products

Centos

Ipv6

Red Hat

References · 46

• 🔥 https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7042 · Security Note
• https://linux.oracle.com/errata/ELSA-2017-3534.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2384 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10088 · Security Note
• https://linux.oracle.com/errata/ELSA-2017-3535.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-10142 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2069 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-10142 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-0817.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-00337 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7097 · Security Note
• https://bdu.fstec.ru/vul/2016-00513 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8399 · Security Note
• https://bdu.fstec.ru/vul/2017-00290 · Security Note