FreeBSD-SA-23:10.pf

  • Thread starter Thread starter FreeBSD Security
  • Start date Start date
Status
Not open for further replies.
F

FreeBSD Security

Guest
With a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed. That is, a packet with multiple fragment extension headers would not be recognized as the correct ultimate payload. Instead a packet with multiple IPv6 fragment headers would unexpectedly be interpreted as a fragmented packet, rather than as whatever the real payload is.
Continue reading...
 
Last edited by a moderator:
Status
Not open for further replies.
Back
Top