Not rated
CVE-2020-10136 IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP…
Description
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RFC2003 - IP Encapsulation within IP | Versions not published |
References
- VU#636397 kb.cert.org
- tools.cisco.com tools.cisco.com
- www.digi.com www.digi.com
- VU#636397 www.kb.cert.org
- Security Concerns with IP Tunneling datatracker.ietf.org
Timeline
- Published
- Last modified