MNBSD-2007-1: IPv6 Type 0 routing headers allow traffic amplification

Description

IPv6 Type 0 routing headers (RH0) could cause packets to traverse the same link multiple times, enabling network amplification and denial-of-service attacks. The patch (which ignores RH0 by default) was applied to CURRENT and STABLE. This corresponds to FreeBSD-SA-07:03.ipv6.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-07:03.ipv6.asc
• https://www.cve.org/CVERecord?id=CVE-2007-2242

Additional Information

Aliases: CVE-2007-2242

Published: May 02, 2007
Last Modified: May 02, 2007