Linux Kernel IPv6 Remote Security Bypass Vulnerability

Linux Kernel IPv6 Remote Security Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
Linux kernel <= 3.3.5
Description:
--------------------------------------------------------------------------------
Bugtraq id: 56891
CVE (CAN) ID: CVE-2012-4444

Linux Kernel is the Kernel of the Linux operating system.

Linux Kernel has a security bypass vulnerability in IPv6 implementation. Attackers can exploit this vulnerability to bypass the security restrictions of the target firewall and send malicious network packets to the affected computers.

<* Source: Zhang Zuotao

Link: http://www.ubuntu.com/usn/usn-1664-1/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.kernel.org/

Ubuntu
------
Ubuntu has released a Security Bulletin (USN-1664-1) and patches for this:
USN-1664-1: USN-1664-1: Linux kernel (EC2) vulnerability
Link: http://www.ubuntu.com/usn/usn-1664-1/