Skip to content
fr Sign in
5.4 Medium

CVE-2025-23018 IPv4-in-IPv6 and IPv6-in-IPv6 tunneling (RFC 2473) do not require the validation or verification of the source of a…

Description

IPv4-in-IPv6 and IPv6-in-IPv6 tunneling (RFC 2473) do not require the validation or verification of the source of a network packet, allowing an attacker to spoof and route arbitrary traffic via an exposed network interface. This is a similar issue to CVE-2020-10136.

Affected products and versions

Product Affected versions Fixed in
IPv6 6 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of IPv6

The 2 CVEs of IPv6 →
CVE-2025-23019 IPv6-in-IPv4 tunneling (RFC 4213) allows an attacker to spoof and route traffic via an exposed network interface 5.4 Medium
Track this CVE