CVE-2025-23019

Description

IPv6-in-IPv4 tunneling (RFC 4213) allows an attacker to spoof and route traffic via an exposed network interface.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://datatracker.ietf.org/doc/html/rfc4213 ↗
• https://papers.mathyvanhoef.com/usenix2025-tunnels.pdf ↗
• https://www.top10vpn.com/research/tunneling-protocol-vulnerability/ ↗
• https://www.kb.cert.org/vuls/id/199397 ↗