The icmp6_send function in net/ipv6/icmp.c in the Linux kernel through 4.8.12 omits a certain check of the dst data structure, which allows remote attackers to cause a denial of service (panic) via a fragmented IPv6 packet.
[
{
"events": [
{
"introduced": "4.8.10"
},
{
"fixed": "4.9"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.4.223"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.9-rc6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.9-rc7"
}
]
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9919.json"