Shoichi Sakane

**Name of the Vulnerable Software and Affected Versions** Apple AirPort Express Base Station versions prior to 7.5.2 Apple AirPort Extreme Base Station versions prior to 7.5.2 Apple Time Capsule versions prior to 7.5.2 **Description** The issue concerns the ICMPv6 implementation, which does not limit the rate of Router Advertisement and Neighbor Discovery packets. This allows remote attackers to cause a denial of service by sending many packets, resulting in resource consumption and device restart. **Recommendations** For Apple AirPort Express Base Station versions prior to 7.5.2, update to firmware version 7.5.2 or later. For Apple AirPort Extreme Base Station versions prior to 7.5.2, update to firmware version 7.5.2 or later. For Apple Time Capsule versions prior to 7.5.2, update to firmware version 7.5.2 or later.

**Name of the Vulnerable Software and Affected Versions** KAME project versions prior to 20071201 **Description** The issue is related to the ipcomp6 input function in the KAME project, which does not properly check the return value of the m pulldown function. This allows remote attackers to cause a denial of service, resulting in a system crash, via an IPv6 packet with an IPComp header. **Recommendations** For versions prior to 20071201, update to a version released after 20071201 to resolve the issue.