NuytsTech Security

CVE-2008-0177

by ·

The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.

Date published : 2008-02-07

http://lists.apple.com/archives/security-announce/2008//May/msg00001.html

http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html

Tags: