Exploitation Summary
EIP tracks 1 public exploit for CVE-2011-1547. PoCs published by Tavis Ormandy.
AI-analyzed exploit summary This exploit demonstrates a kernel stack overflow vulnerability in BSD-derived IPComp implementations (CVE-2011-1547) by recursively nesting IPComp packets. It targets systems using NetBSD/KAME-derived network stacks, such as Xnu (macOS) and FTOS, by sending a crafted packet that triggers a stack overflow during decompression.
Description
Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a crafted (1) IPv4 or (2) IPv6 packet with nested IPComp headers.
Exploits (1)
This exploit demonstrates a kernel stack overflow vulnerability in BSD-derived IPComp implementations (CVE-2011-1547) by recursively nesting IPComp packets. It targets systems using NetBSD/KAME-derived network stacks, such as Xnu (macOS) and FTOS, by sending a crafted packet that triggers a stack overflow during decompression.