Heap Overflow in OpenBSD's slaacd via Router Advertisement

In this blog post we analyze a heap overflow vulnerability we discovered in the IPv6 stack of OpenBSD, more specifically in its slaacd daemon. This issue, whose root cause can be found in the mishandling of Router Advertisement messages containing a DNSSL option with a malformed domain label, was patched by OpenBSD on March 21, 2022. A proof-of-concept to reproduce the vulnerability is provided.

https://blog.quarkslab.com/heap-overflow-in-openbsds-slaacd-via-router-advertisement.html

#security #network #slaacd

OpenBSD

Heap Overflow in OpenBSD's slaacd via Router Advertisement

In this blog post we analyze a heap overflow vulnerability we discovered in the IPv6 stack of OpenBSD, more specifically in its slaacd daemon. This issue, whose root cause can be found in the mishandling of Router Advertisement messages containing a DNSSL option with a malformed domain label, was patched by OpenBSD on March 21, 2022. A proof-of-concept to reproduce the vulnerability is provided.

https://blog.quarkslab.com/heap-overflow-in-openbsds-slaacd-via-router-advertisement.html

#security #network #slaacd

👍3🎉1

hottg.com/openbsd/352

1.48K viewsMar 24, 2022 at 13:20