3 ms·
The report says it can be exploited with IPv6 enabled, but IPv6 forwarding disabled and reception of router advertisements conditional on the this aka stop look
by crest 3y ago
The report says it can be exploited with IPv6 enabled, but IPv6 forwarding disabled and reception of router advertisements conditional on the this aka stop looking at router advertisements if the system is configured as IPv6 router.
- ghostpepper 3y agoMaybe the blog post is just ambiguously worded but I'd like a confirmation from them if so. You are only affected if one of the below settings is applied: ipv6/settings/ set accept-router-advertisements=yes or ipv6/settings/set forward=no accept-router-advertisements=yes-if-forwarding-disabled Specifically I'd like to know whether this config is vulnerable: /ipv6/settings/set disable-ipv6=yes forward=no accept-router-advertisements=yes-if-forwarding-disabled
- bombcar 3y agoIt is ambiguous but I'd hope that disable-ipv6 would override everything else. I had /ipv6/settings/print disable-ipv6: no forward: yes accept-redirects: yes-if-forwarding-disabled accept-router-advertisements: yes-if-forwarding-disabled max-neighbor-entries: 8192 which I interpreted as "maybe" being ok? But I upgraded anyway.
- crest 3y agoRun `/ipv6/settings/export verbose` to show you the combination of your configuration and the default values on the relevant subtree. I would've expected the `disable-ipv6` to disable all ICMPv6 processing including the code paths leading to the RCE vulnerability, but the post doesn't state it explicitly.