Description
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
IETF RFC2003 - IP Encapsulation within IP
STD 1affected
References
- https://kb.cert.org/vuls/id/636397/ ↗
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4 ↗
- https://www.digi.com/resources/security ↗
- https://www.kb.cert.org/vuls/id/636397 ↗
- https://datatracker.ietf.org/doc/html/rfc6169 ↗
- https://www.kb.cert.org/vuls/id/199397 ↗