CVE-2016-10142

Name of the Vulnerable Software and Affected Versions IPv6 (affected versions not specified)

Description An issue in the IPv6 protocol specification allows an attacker to leverage the generation of IPv6 atomic fragments, triggering the use of fragmentation in an arbitrary IPv6 flow. This can lead to fragmentation-based attacks against legacy IPv6 nodes that do not implement RFC6946. Even nodes that implement RFC6946 can be subject to Denial of Service (DoS) attacks due to the generation of IPv6 atomic fragments. An attacker can send a forged ICMPv6 PTB error message to trigger the generation of IPv6 atomic fragments, resulting in a DoS scenario when these packets are dropped.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.