Description
OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash) by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port.
References
- http://www.guninski.com/obsdmtu.html
- http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet6/ip6_output.c
- 20040205 OpenBSD IPv6 remote kernel crash mailing-list
- 20040204 Remote openbsd crash with ip6, yet still openbsd much better than windows mailing-list
- 3825 vdb-entry
- openbsd-ipv6-dos(15044) vdb-entry
- 9577 vdb-entry