CVEvulnerability
CVE-2010-4670
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-01-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-399
Description
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package, aka Bug ID CSCti24526.
Affected configurations
• cisco adaptive security appliance software (<= 8.2\(3\))
• cisco adaptive security appliance software 7.0
• cisco adaptive security appliance software 7.0\(0\)
• cisco adaptive security appliance software 7.0\(2\)
• cisco adaptive security appliance software 7.0\(4\)
• cisco adaptive security appliance software 7.0\(5\)
• cisco adaptive security appliance software 7.0\(5.2\)
• cisco adaptive security appliance software 7.0\(6.7\)
• cisco adaptive security appliance software 7.0.1
• cisco adaptive security appliance software 7.0.1.4
• cisco adaptive security appliance software 7.0.2
• cisco adaptive security appliance software 7.0.4
• cisco adaptive security appliance software 7.0.4.3
• cisco adaptive security appliance software 7.0.5
• cisco adaptive security appliance software 7.0.6
• cisco adaptive security appliance software 7.0.7
• cisco adaptive security appliance software 7.0.8
• cisco adaptive security appliance software 7.1
• cisco adaptive security appliance software 7.1\(2\)
• cisco adaptive security appliance software 7.1\(2.5\)
• cisco adaptive security appliance software 7.1\(2.27\)
• cisco adaptive security appliance software 7.1\(2.48\)
• cisco adaptive security appliance software 7.1\(2.49\)
• cisco adaptive security appliance software 7.1\(5\)
• cisco adaptive security appliance software 7.1.1
• cisco adaptive security appliance software 7.1.2
• cisco adaptive security appliance software 7.2
• cisco adaptive security appliance software 7.2\(1\)
• cisco adaptive security appliance software 7.2\(1.22\)
• cisco adaptive security appliance software 7.2\(2\)
• cisco adaptive security appliance software 7.2\(2.5\)
• cisco adaptive security appliance software 7.2\(2.7\)
• cisco adaptive security appliance software 7.2\(2.8\)
• cisco adaptive security appliance software 7.2\(2.10\)
• cisco adaptive security appliance software 7.2\(2.14\)
• cisco adaptive security appliance software 7.2\(2.15\)
• cisco adaptive security appliance software 7.2\(2.16\)
• cisco adaptive security appliance software 7.2\(2.17\)
• cisco adaptive security appliance software 7.2\(2.18\)
• cisco adaptive security appliance software 7.2\(2.19\)
• cisco adaptive security appliance software 7.2\(2.48\)
• cisco adaptive security appliance software 7.2.1
• cisco adaptive security appliance software 7.2.2
• cisco adaptive security appliance software 7.2.3
• cisco adaptive security appliance software 7.2.4
• cisco adaptive security appliance software 7.2.5
• cisco adaptive security appliance software 8.0
• cisco adaptive security appliance software 8.0.2
• cisco adaptive security appliance software 8.0.3
• cisco adaptive security appliance software 8.0.4
• cisco adaptive security appliance software 8.0.5
• cisco adaptive security appliance software 8.2\(1\)
• cisco adaptive security appliance software 8.2\(2\)
• cisco adaptive security appliance software 8.2.1
• cisco adaptive security appliance software 8.2.2
• cisco 5500 series adaptive security appliance
• cisco asa 5500
• cisco pix security appliance
Related
Weakness · not in database (1)
References
- http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html Exploit
- http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3 Exploit
- http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4 mirror.fem-net.de
- http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf www.cisco.com
- http://www.securityfocus.com/bid/45760 www.securityfocus.com
- http://www.securitytracker.com/id?1024963 www.securitytracker.com
- http://www.youtube.com/watch?v=00yjWB6gGy8 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64598 exchange.xforce.ibmcloud.com
- http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html Exploit
- http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3 Exploit
- http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4 mirror.fem-net.de
- http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf www.cisco.com
- http://www.securityfocus.com/bid/45760 www.securityfocus.com
- http://www.securitytracker.com/id?1024963 www.securitytracker.com
- http://www.youtube.com/watch?v=00yjWB6gGy8 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64598 exchange.xforce.ibmcloud.com