The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.
Max CVSS
7.8
EPSS Score
51.71%
Published
2008-02-07
Updated
2017-09-29
1 vulnerabilities found