National Cyber-Alert System

Vulnerability Summary for CVE-2007-2242

Overview

The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers (IPV6_RTHDR_TYPE_0) that create network amplification between two routers.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#267289

Name: VU#267289

Hyperlink:http://www.kb.cert.org/vuls/id/267289

External Source: BID

Name: 23615

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/23615

External Source: SECUNIA

Name: 24978

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/24978

External Source: BUGTRAQ

Name: 20070508 FLEA-2007-0016-1: kernel

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/467939/30/6690/threaded

External Source: MISC

Name: http://www.secdev.org/conf/IPv6_RH_security-csw07.pdf

Hyperlink:http://www.secdev.org/conf/IPv6_RH_security-csw07.pdf

External Source: OPENBSD

Name: [4.0] 20070423 012: SECURITY FIX: April 23, 2007

Hyperlink:http://openbsd.org/errata40.html#012_route6

External Source: OPENBSD

Name: [3.9] 20070423 022: SECURITY FIX: April 23, 2007

Hyperlink:http://openbsd.org/errata39.html#022_route6

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-1310

Hyperlink:https://issues.rpath.com/browse/RPL-1310

External Source: XF

Name: openbsd-ipv6-type0-dos(33851)

Hyperlink:http://xforce.iss.net/xforce/xfdb/33851

External Source: UBUNTU

Name: USN-508-1

Hyperlink:http://www.ubuntu.com/usn/usn-508-1

External Source: UBUNTU

Name: USN-486-1

Hyperlink:http://www.ubuntu.com/usn/usn-486-1

External Source: SECTRACK

Name: 1017949

Hyperlink:http://www.securitytracker.com/id?1017949

External Source: BUGTRAQ

Name: 20070615 rPSA-2007-0124-1 kernel xen

Hyperlink:http://www.securityfocus.com/archive/1/471457

External Source: REDHAT

Name: RHSA-2007:0347

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0347.html

External Source: SUSE

Name: SUSE-SA:2007:051

Hyperlink:http://www.novell.com/linux/security/advisories/2007_51_kernel.html

External Source: MANDRIVA

Name: MDKSA-2007:216

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:216

External Source: MANDRIVA

Name: MDKSA-2007:196

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:196

External Source: MANDRIVA

Name: MDKSA-2007:171

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:171

External Source: VUPEN

Name: ADV-2007-3050

Hyperlink:http://www.frsirt.com/english/advisories/2007/3050

External Source: VUPEN

Name: ADV-2007-2270

Hyperlink:http://www.frsirt.com/english/advisories/2007/2270

External Source: VUPEN

Name: ADV-2007-1563

Hyperlink:http://www.frsirt.com/english/advisories/2007/1563

External Source: FREEBSD

Name: FreeBSD-SA-07:03.ipv6

Hyperlink:http://security.freebsd.org/advisories/FreeBSD-SA-07:03.ipv6.asc

External Source: SECUNIA

Name: 28806

Hyperlink:http://secunia.com/advisories/28806

External Source: SECUNIA

Name: 26703

Hyperlink:http://secunia.com/advisories/26703

External Source: SECUNIA

Name: 26664

Hyperlink:http://secunia.com/advisories/26664

External Source: SECUNIA

Name: 26651

Hyperlink:http://secunia.com/advisories/26651

External Source: SECUNIA

Name: 26620

Hyperlink:http://secunia.com/advisories/26620

External Source: SECUNIA

Name: 26133

Hyperlink:http://secunia.com/advisories/26133

External Source: SECUNIA

Name: 25770

Hyperlink:http://secunia.com/advisories/25770

External Source: SECUNIA

Name: 25691

Hyperlink:http://secunia.com/advisories/25691

External Source: SECUNIA

Name: 25288

Hyperlink:http://secunia.com/advisories/25288

External Source: SECUNIA

Name: 25083

Hyperlink:http://secunia.com/advisories/25083

External Source: SECUNIA

Name: 25068

Hyperlink:http://secunia.com/advisories/25068

External Source: SECUNIA

Name: 25033

Hyperlink:http://secunia.com/advisories/25033

External Source: SUSE

Name: SUSE-SA:2008:006

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html

External Source: CONFIRM

Name: http://docs.info.apple.com/article.html?artnum=306375

Hyperlink:http://docs.info.apple.com/article.html?artnum=306375

External Source: CONFIRM

Name: http://docs.info.apple.com/article.html?artnum=305712

Hyperlink:http://docs.info.apple.com/article.html?artnum=305712