Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2013-0343

Description

The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages.

POC

Reference

- http://www.ubuntu.com/usn/USN-1976-1

- http://www.ubuntu.com/usn/USN-2038-1

- http://www.ubuntu.com/usn/USN-2039-1

Github

No PoCs found on GitHub currently.