ghsa-h2rp-j2g8-grv6
Vulnerability from github
Published
2022-05-17 02:03
Modified
2022-05-17 02:03
Details

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package, aka Bug ID CSCti24526.

Show details on source website

To clipboard 

{
  "affected": [],
  "aliases": [
    "CVE-2010-4670"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2011-01-07T12:00:00Z",
    "severity": "HIGH"
  },
  "details": "The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package, aka Bug ID CSCti24526.",
  "id": "GHSA-h2rp-j2g8-grv6",
  "modified": "2022-05-17T02:03:36Z",
  "published": "2022-05-17T02:03:36Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-4670"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64598"
    },
    {
      "type": "WEB",
      "url": "http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html"
    },
    {
      "type": "WEB",
      "url": "http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3"
    },
    {
      "type": "WEB",
      "url": "http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4"
    },
    {
      "type": "WEB",
      "url": "http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/45760"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1024963"
    },
    {
      "type": "WEB",
      "url": "http://www.youtube.com/watch?v=00yjWB6gGy8"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.