Skip to main content

Security Implications of IPv6 Options of Type 10xxxxxx

Document Type Expired Internet-Draft (individual)
Expired & archived
Authors Fernando Gont , Will (Shucheng) LIU
Last updated 2013-09-21 (Latest revision 2013-03-20)
RFC stream (None)
Intended RFC status (None)
Stream Stream state (No stream defined)
Consensus boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:


When an IPv6 node processing an IPv6 packet does not support an IPv6 option whose two-highest-order bits of the Option Type are '10', it is required to respond with an ICMPv6 Parameter Problem error message, even if the Destination Address of the packet was a multicast address. This feature provides an amplification vector, opening the door to an IPv6 version of the 'Smurf' Denial-of-Service (DoS) attack found in IPv4 networks. This document discusses the security implications of the aforementioned options, and formally updates RFC 2460 and RFC 4443 such that this attack vector is eliminated. Additionally, it describes a number of operational mitigations that could be deployed against this attack vector.


Fernando Gont
Will (Shucheng) LIU

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)