|
|
| |
|
| |
mipv6-daemon: multiple vulnerabilities
| Package(s): | mipv6-daemon |
CVE #(s): | CVE-2010-2522
CVE-2010-2523
|
| Created: | August 17, 2010 |
Updated: | October 25, 2010 |
| Description: |
From the Fedora advisory:
This update fixes two security problems in mipv6-daemon: I) CVE-2010-2522:
The origin of netlink messages sent to mipv6-daemon was not verified, allowing
for local users to spoof netlink messages and thus influence the behaviour of
mipv6-daemon. II) CVE-2010-2523: A specially crafted
ND_OPT_PREFIX_INFORMATION or ND_OPT_HOME_AGENT_INFO packet could be used to
exploit a buffer overflow in mipv6-daemon.
|
| Alerts: |
|
( Log in to post comments)
|
|
|