VULNERABILITY INTELLIGENCE

CVE-2008-0177

CVSS score7.8 HIGH
EPSS probability15.54%
CISA KEVNot currently listed
Published2008-02-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C

Description

The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.

Primary references