Mitigate Local Denial of Service with IPv6 Router Advertisements
and log attack attempts. Submitted by: hrs Security: FreeBSD-SA-15:09.nd6 Security: CVE-2015-2923
This commit is contained in:
parent
edc76c95db
commit
dd3856601d
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=281229
@ -297,8 +297,16 @@ nd6_ra_input(struct mbuf *m, int off, int icmp6len)
|
||||
}
|
||||
if (nd_ra->nd_ra_retransmit)
|
||||
ndi->retrans = ntohl(nd_ra->nd_ra_retransmit);
|
||||
if (nd_ra->nd_ra_curhoplimit)
|
||||
ndi->chlim = nd_ra->nd_ra_curhoplimit;
|
||||
if (nd_ra->nd_ra_curhoplimit) {
|
||||
if (ndi->chlim < nd_ra->nd_ra_curhoplimit)
|
||||
ndi->chlim = nd_ra->nd_ra_curhoplimit;
|
||||
else if (ndi->chlim != nd_ra->nd_ra_curhoplimit) {
|
||||
log(LOG_ERR, "RA with a lower CurHopLimit sent from "
|
||||
"%s on %s (current = %d, received = %d). "
|
||||
"Ignored.\n", ip6_sprintf(ip6bufs, &ip6->ip6_src),
|
||||
if_name(ifp), ndi->chlim, nd_ra->nd_ra_curhoplimit);
|
||||
}
|
||||
}
|
||||
dr = defrtrlist_update(&dr0);
|
||||
}
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user