4.7
Medium
CVE-2021-27854 Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers,…
Description
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| P802.1Q | Versions not published | |
| draft-ietf-v6ops-ra-guard | 08 | No fix stated |
| 802.2 | 802.2h-1997 | No fix stated |
References
- datatracker.ietf.org datatracker.ietf.org
- standards.ieee.org standards.ieee.org
- standards.ieee.org standards.ieee.org
- kb.cert.org kb.cert.org
- blog.champtar.fr blog.champtar.fr
Timeline
- Published
- Last modified