Description
The ICMP path MTU (PMTU) discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing "ICMP Fragmentation needed but Don't Fragment (DF) set" packets between two target hosts, which could cause one host to lower its MTU when transmitting to the other host.
References
- icmp-pmtu-dos(5975) vdb-entry
- http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
- 20010115 ICMP fragmentation required but DF set problems. mailing-list
- MDVSA-2013:150 vendor-advisory