Maniphest T2286

IPoE server vulnerability
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Unknown Object (User)
	Apr 13 2020, 4:47 PM

Tags

Referenced Files

None

Subscribers

Active contributors

Description

We have vulnerability with IPoE server in rolling.
Possible attack with some DHCP/DHCPv6 packets modification.

Details

Difficulty level: Unknown (require assessment)
Version: 1.3-rolling-202004120117
Why the issue appeared?: Will be filled on close
Is it a breaking change?: Unspecified (possibly destroys the router)

Event Timeline

Unknown Object (User) created this task.Apr 13 2020, 4:47 PM

c-po changed the task status from Open to Backport candidate.Apr 13 2020, 6:18 PM

c-po added a project: VyOS 1.3 Equuleus.

c-po moved this task from Need Triage to Backport Candidates on the VyOS 1.3 Equuleus board.

c-po added a project: Ready for Crux (1.2.x).

pasik subscribed.Apr 14 2020, 11:45 AM

c-po closed this task as Resolved.Apr 18 2020, 1:13 PM

c-po edited projects, added VyOS 1.2 Crux (VyOS 1.2.6); removed Ready for Crux (1.2.x).

c-po moved this task from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.

c-po moved this task from Backport Candidates to Finished on the VyOS 1.3 Equuleus board.Jun 2 2020, 7:36 PM

syncer edited projects, added VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus.Aug 30 2022, 2:01 PM

syncer moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0) board.