ip6_tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to (1) bypass a rule that disallows a protocol, via a packet with the protocol header not located immediately after the fragment header, aka "ip6_tables protocol bypass bug;" and (2) bypass a rule that looks for a certain extension header, via a packet with an extension header outside the first fragment, aka "ip6_tables extension header bypass bug."
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2006-11-07T00:00:00

Updated: 2024-08-07T19:14:47.544Z

Reserved: 2006-09-06T00:00:00

Link: CVE-2006-4572

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2006-11-07T00:07:00.000

Modified: 2023-02-13T02:16:46.247

Link: CVE-2006-4572

cve-icon Redhat

No data.