Skip to content
OpenAdvisories

Vendor

IETF

12 known vulnerabilities.

Products

draft-ietf-v6ops-ra-guard 3 P802.1Q 3 IPv6 2 RFC2784 - Generic Routing Encapsulation (GRE) 1 RFC 1 draft-ietf-v6ops-ra-guard-08 1 RFC 7523 1 RFC2003 - IP Encapsulation within IP 1 DHCP 1 draft-ietf-intarea-gue-09 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-27371

    In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication m…

    IETF RFC 7523
  • Medium 5.3
    CVE-2024-7596

    Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet

    Proposed Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and oth…

    IETF draft-ietf-intarea-gue-09
  • Medium 5.3
    CVE-2024-7595 Public exploit

    GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet

    GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network…

    IETF RFC2784 - Generic Routing Encapsulation (GRE)
  • Medium 5.4
    CVE-2025-23018

    IPv4-in-IPv6 and IPv6-in-IPv6 tunneling (RFC 2473) do not require the validation or verification of the source of a net…

    IETF IPv6
  • Medium 5.4
    CVE-2025-23019

    IPv6-in-IPv4 tunneling (RFC 4213) allows an attacker to spoof and route traffic via an exposed network interface.

    IETF IPv6
  • Medium 4.7
    CVE-2021-27862

    L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with an invalid length during Ethernet to Wifi frame translation

    Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion (and optionally VLAN0 headers).

    IETF IEEE 802.2 draft-ietf-v6ops-ra-guard-08
  • Medium 4.7
    CVE-2021-27861

    L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths

    Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length (and optionally VLAN0 headers)

    IETF IEEE 802.2 P802.1Q
  • Medium 4.7
    CVE-2021-27854

    L2 network filtering bypass using stacked VLAN0, LLC/SNAP headers, and Ethernet to Wifi frame translation

    Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse.

    IETF IEEE 802.2 draft-ietf-v6ops-ra-guard
  • Medium 4.7
    CVE-2021-27853

    L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers

    Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers.

    IETF IEEE 802.2 draft-ietf-v6ops-ra-guard