CVE-2008-0177

None

CVSS

—

EPSS

15.5%

Published

Feb 7, 2008

CISA due date

—

The record

The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.

Affected packages

Ecosystem	Package	Introduced	Fixed