A vulnerability has been identified in NetBSD, which could be exploited by remote attackers to cause a denial of service. This issue is caused by an error in the "ipcomp6_input()" [src/sys/netinet6/ipcomp_input.c] function when processing IPv6 packets that contain the IPComp header, which could be exploited by remote attackers to crash a vulnerable system, creating a denial of service condition.

Affected Products

NetBSD versions 2.x
NetBSD versions 3.x

Solution

Apply patches :
http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/ipcomp_input.c

References

http://www.vupen.com/english/advisories/2008/0442
http://www.kb.cert.org/vuls/id/110947

Credits

Vulnerability reported by Coverity Prevent and Shoichi Sakane.

Changelog

2008-02-07 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.