News for hackers. Stuff that matters.

A comment on CVE-2023-4809: FreeBSD pf bypass when using IPv6. Parent comment

Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6 by enrico204 on Friday September 08, 2023 @05:19PM (#37439583)
Fragmentation is a nightmare in a nightmare: we also discovered that IPv6 fragments reassembly (as implemented by major operating systems) is still plagued by the problem of overlapping fragments. Potentially, you can still bypass IDS/IPS using the same techniques from IPv4...

Shameless plug: we will present these results at ESORICS 2023 :-)

[ Parent | on HN ]

There are no comments on this comment yet.