CVE-2006-4650: Integer Overflow
Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not verify the offset field of a GRE packet during decapsulation, which leads to an integer overflow that references data from incorrect memory locations, which allows remote attackers to inject crafted packets into the routing queue, possibly bypassing intended router ACLs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4650?
CVE-2006-4650 has been rated with a high severity due to its potential to allow remote attackers to exploit the vulnerability.
How do I fix CVE-2006-4650?
To remediate CVE-2006-4650, upgrade your Cisco IOS to a version that includes the RFC2784 compliance fixes.
Which versions of Cisco IOS are affected by CVE-2006-4650?
CVE-2006-4650 affects Cisco IOS versions 12.0, 12.1, and 12.2.
What is the impact of CVE-2006-4650?
The impact of CVE-2006-4650 can lead to an integer overflow that allows attackers to access arbitrary memory locations.
How is CVE-2006-4650 exploited?
CVE-2006-4650 can be exploited by sending specially crafted GRE packets that manipulate the offset field.