Posted by Tavis Ormandy on Apr 01
BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload
——————————————————————————-
Gruezi, this document describes CVE-2011-1547.
RFC3173 ip payload compression, henceforth ipcomp, is a protocol intended to
provide compression of ip datagrams, and is commonly used alongside IPSec
(although there is no requirement to do so).
An ipcomp datagram consists of an ip header…
Source: BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload
