CVE-2010-4671

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS before 15.0(1)XA5 allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package, aka Bug ID CSCti33534.

• CWE-400

• http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.htmlExploit, Third Party Advisory
• http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3Exploit, Third Party Advisory
• http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4Third Party Advisory
• http://www.ciscosystems.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdfBroken Link
• http://www.securityfocus.com/bid/45760Third Party Advisory, VDB Entry
• http://www.youtube.com/watch?v=00yjWB6gGy8Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64589Third Party Advisory, VDB Entry
• http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.htmlExploit, Third Party Advisory
• http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3Exploit, Third Party Advisory
• http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4Third Party Advisory
• http://www.ciscosystems.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdfBroken Link
• http://www.securityfocus.com/bid/45760Third Party Advisory, VDB Entry
• http://www.youtube.com/watch?v=00yjWB6gGy8Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64589Third Party Advisory, VDB Entry

Published

Jan 7, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4665Integer overflow in the ReadDirectory function in tiffdump.c…
• CVE-2010-4666Buffer overflow in libarchive 3.0 pre-release code allows re…
• CVE-2010-4667Cross-site scripting (XSS) vulnerability in Coppermine Photo…
• CVE-2010-4668The blk_rq_map_user_iov function in block/blk-map.c in the L…
• CVE-2010-4669The Neighbor Discovery (ND) protocol implementation in the I…
• CVE-2010-4670The Neighbor Discovery (ND) protocol implementation in the I…
• CVE-2010-4672Cisco Adaptive Security Appliances (ASA) 5500 series devices…
• CVE-2010-4673Cisco Adaptive Security Appliances (ASA) 5500 series devices…
• CVE-2010-4674Unspecified vulnerability on Cisco Adaptive Security Applian…
• CVE-2010-4675Cisco Adaptive Security Appliances (ASA) 5500 series devices…
• CVE-2010-4676Unspecified vulnerability on Cisco Adaptive Security Applian…
• CVE-2010-4677emWEB on Cisco Adaptive Security Appliances (ASA) 5500 serie…