CVE-2008-0177: Kame Ipcomp

High severity, CVSS 7.8. EPSS: 15.5% chance of exploitation in the next 30 days.

The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.

Affected products

• Kame Ipcomp: any version

Published 2008-02-07. Last modified 2026-06-16.