GHSA-36wf-hpjh-x3frMediumCVSS 5.7
A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6...
🔗 CVE IDs covered (1)
📋 Description
A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.
🔗 References (12)
- https://nvd.nist.gov/vuln/detail/CVE-2023-1206
- https://bugzilla.redhat.com/show_bug.cgi?id=2175903
- https://www.debian.org/security/2023/dsa-5480
- https://www.debian.org/security/2023/dsa-5492
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-769027.html
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html
- https://security.netapp.com/advisory/ntap-20230929-0006
- https://github.com/advisories/GHSA-36wf-hpjh-x3fr