OpenBSD flaw exploits IPv6 weakness

Discovered by experts with Core Security, the vulnerability allows attackers to gain complete control of an OpenBSD machine by sending malformed IPv6 packets.

“In order to perform such an attack, the attacker must be either on the same network as the target system or on a network that can route packets to the target system,” said Ivan Arce, CTO of Core Security.

Arce said that Core Security worked with OpenBSD developers to close the security hole in the system before disclosing the flaw. Users are highly encouraged to download the patch and recompile the kernel to secure their systems from an attack.

He said that the vulnerability highlights the fact that no operating system is impervious to security bugs, even one as hardened as OpenBSD. He also explained that this flaw should act as a warning to those deploying the IPv6 protocol.

"It’s an IPv6 problem and we wanted to point that out because it is an example of how implementing a complex protocol, even in one of the most robust and secure operating systems such as OpenBSD, could be prone to errors and implementation bugs,” he said.

“Since IPv6 is starting to pick up in terms of adoption, we felt that it was important to talk about this.”