Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-0177
HistoryFeb 07, 2008 - 12:00 a.m.

CVE-2008-0177

2008-02-0700:00:00
ubuntu.com
ubuntu.com
5

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.47 Medium

EPSS

Percentile

97.5%

The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME
project before 20071201 does not properly check the return value of the
m_pulldown function, which allows remote attackers to cause a denial of
service (system crash) via an IPv6 packet with an IPComp header.

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.47 Medium

EPSS

Percentile

97.5%