National Cyber Awareness System

Vulnerability Summary for CVE-2008-0177

Overview

The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#110947

Name: VU#110947

Hyperlink:http://www.kb.cert.org/vuls/id/110947

US-CERT Technical Alert: TA08-150A

Name: TA08-150A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA08-150A.html

External Source: BID

Name: 27642

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/27642

External Source: SECUNIA

Name: 28788

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/28788

External Source: VUPEN

Name: ADV-2008-2094

Hyperlink:http://www.vupen.com/english/advisories/2008/2094/references

External Source: VUPEN

Name: ADV-2008-1697

Hyperlink:http://www.vupen.com/english/advisories/2008/1697

External Source: VUPEN

Name: ADV-2008-0688

Hyperlink:http://www.vupen.com/english/advisories/2008/0688

External Source: VUPEN

Name: ADV-2008-0441

Hyperlink:http://www.vupen.com/english/advisories/2008/0441

External Source: CONFIRM

Name: http://www.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ipcomp_input.c.diff?r1=1.36;r2=1.37

Hyperlink:http://www.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ipcomp_input.c.diff?r1=1.36;r2=1.37

External Source: SECUNIA

Name: 31074

Hyperlink:http://secunia.com/advisories/31074

External Source: SECUNIA

Name: 28816

Type: Advisory

Hyperlink:http://secunia.com/advisories/28816

External Source: APPLE

Name: APPLE-SA-2008-07-11

Hyperlink:http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html

External Source: CONFIRM

Name: http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/ipcomp_input.c?f=u&only_with_tag=netbsd-3-1

Type: Advisory

Hyperlink:http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/ipcomp_input.c?f=u&only_with_tag=netbsd-3-1

External Source: MILW0RM

Name: 5191

Hyperlink:http://www.milw0rm.com/exploits/5191

External Source: SECTRACK

Name: 1019314

Hyperlink:http://securitytracker.com/id?1019314

External Source: FREEBSD

Name: FreeBSD-SA-08:04

Hyperlink:http://security.freebsd.org/advisories/FreeBSD-SA-08:04.ipsec.asc

External Source: SECUNIA

Name: 30430

Hyperlink:http://secunia.com/advisories/30430

External Source: SECUNIA

Name: 29130

Hyperlink:http://secunia.com/advisories/29130

External Source: SECUNIA

Name: 28979

Hyperlink:http://secunia.com/advisories/28979

External Source: APPLE

Name: APPLE-SA-2008-05-28

Hyperlink:http://lists.apple.com/archives/security-announce/2008//May/msg00001.html