CVE-2007-2242

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-25 · updated 2026-06-16

Description

The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers (IPV6_RTHDR_TYPE_0) that create network amplification between two routers.

Affected products

IETF IPv6: all versions

References

http://docs.info.apple.com/article.html?artnum=305712
http://docs.info.apple.com/article.html?artnum=306375
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html
http://openbsd.org/errata39.html#022_route6
http://openbsd.org/errata40.html#012_route6
http://secunia.com/advisories/24978
http://secunia.com/advisories/25033
http://secunia.com/advisories/25068
http://secunia.com/advisories/25083
http://secunia.com/advisories/25288
http://secunia.com/advisories/25691
http://secunia.com/advisories/25770

Get alerted when CVE-2007-2242 or the next vulnerability affects your stack