CVE-2008-2476

Published Oct 3, 2008 CVSS 2.0 · 9.3 Critical EPSS 7.4% KEV · Not listed
Description
The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
certcc
Published
Updated
Aug 7, 2024, 9:05 AM
Reserved
May 28, 2008, 12:00 AM
Status
Modified
Published
Oct 3, 2008, 3:07 PM
Modified
Jun 16, 2026, 10:53 PM