Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 458778 (CVE-2013-0343)

Summary: Kernel : handling of IPv6 temporary addresses (CVE-2013-0343)
Product: Gentoo Security Reporter: Agostino Sarubbo <ago>
Component: KernelAssignee: Gentoo Kernel Security <security-kernel>
Status: RESOLVED OBSOLETE    
Severity: normal CC: kernel
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
URL: https://bugzilla.redhat.com/show_bug.cgi?id=914664
Whiteboard:
Package list:
Runtime testing required: ---

Description Agostino Sarubbo gentoo-dev 2013-02-22 19:45:33 UTC
From $URL :

Due to the way the Linux kernel handles the creation of IPv6 temporary
addresses a malicious LAN user can remotely disable them altogether
which may lead to privacy violations and information disclosure.

Reference:
  -> http://seclists.org/oss-sec/2012/q4/292
  -> http://seclists.org/oss-sec/2013/q1/92
Comment 2 Aaron Bauman (RETIRED) gentoo-dev 2018-04-04 18:33:57 UTC
There are no longer any 2.x or <3.8 kernels available in the repository with the exception of sys-kernel/xbox-sources which is unsupported by security.