CVE-2021-23270

HIGH

Gargoyle OS 1.12.0 - Excessive Network Traffic via IPv6 Routing Loop

Title source: llm
STIX 2.1

Description

In Gargoyle OS 1.12.0, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.

References (1)

Core 1

Scores

CVSS v3 7.5
EPSS 0.0103
EPSS Percentile 59.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-834
Status published
Products (1)
gargoyle-router/gargoyle 1.12.0
Published Apr 12, 2021
Tracked Since Feb 18, 2026