NVD

Id
163  
Name
CVE-2008-0177  
Description
The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-03  
Published
2008-02-07  
Modified Date
2011-03-07  
Seq
2008-0177  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
1311 163 CVE-2008-0177 http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/ipcomp_input.c?f=u&only_with_tag=netbsd-3-1  View
1312 163 CVE-2008-0177 APPLE-SA-2008-07-11  View
1313 163 CVE-2008-0177 APPLE-SA-2008-05-28  View
1314 163 CVE-2008-0177 FreeBSD-SA-08:04  View
1315 163 CVE-2008-0177 1019314  View
1316 163 CVE-2008-0177 http://www.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ipcomp_input.c.diff?r1=1.36;r2=1.37  View
1317 163 CVE-2008-0177 VU#110947  View
1318 163 CVE-2008-0177 5191  View
1319 163 CVE-2008-0177 27642  View
1320 163 CVE-2008-0177 TA08-150A  View
1321 163 CVE-2008-0177 ADV-2008-0441  View
1322 163 CVE-2008-0177 ADV-2008-0688  View
1323 163 CVE-2008-0177 ADV-2008-1697  View
1324 163 CVE-2008-0177 ADV-2008-2094  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45773 JVNDB-2008-001083 KAME プロジェクトの IPv6 スタックにおける IPComp パケットの処理にサービス運用妨害(DoS)の脆弱性 KAME プロジェクトの IPv6 スタックには IPCompパケットを正しく扱えない脆弱性があります。遠隔の第三者により、サービス運用妨害 (DoS) 攻撃が行われる可能性があります。 CVE-2008-0177 30290 CVE-2008-0177 163 7.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001083.html 2008-02-07 2008-07-29 View