CVE-2025-23018

Name of the Vulnerable Software and Affected Versions IPv6 versions (affected versions not specified)

Description The issue concerns IPv4-in-IPv6 and IPv6-in-IPv6 tunneling, as defined in RFC 2473, which does not require validation or verification of the source of a network packet. This allows an attacker to spoof and route arbitrary traffic via an exposed network interface.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.