[Secure-testing-commits] r5737 - data/CVE

[Florian Weimer]

Author: fw
Date: 2007-04-26 18:24:52 +0000 (Thu, 26 Apr 2007)
New Revision: 5737

Modified:
   data/CVE/list
Log:
CVE-2007-2242: DoS in IPv6 implementations


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-04-26 09:14:16 UTC (rev 5736)
+++ data/CVE/list	2007-04-26 18:24:52 UTC (rev 5737)
@@ -39,7 +39,10 @@
 CVE-2007-2243 (OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is ...)
 	- openssh <unfixed> (low)
 CVE-2007-2242 (The IPv6 protocol allows remote attackers to cause a denial of service ...)
-	TODO: check
+	- linux-2.6 (low)
+	- kfreebsd-5 (low)
+	NOTE: This should be off by default, tweakable by a simple knob.
+	NOTE: (FreeBSD has it turned on for hosts, too.)
 CVE-2007-2241
 	RESERVED
 CVE-2007-2240