CVE-2023-1206

    Dashboard / Vulnerabilities / CVE-2023-1206

    CVE-2023-1206

    Published: 30 Jun 2023Last Modified: 16 Apr 2026

    Summary:

    Details: A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.

    References: https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html, https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html, https://security.netapp.com/advisory/ntap-20230929-0006/, https://www.debian.org/security/2023/dsa-5480, https://www.debian.org/security/2023/dsa-5492, https://bugzilla.redhat.com/show_bug.cgi?id=2175903

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-1206 | CVE-DB