API Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 7739
[ACTIVE]

Security Implications of Predictable Fragment Identification Values

Metadata

Publisher
IETF
Doc Type
Informational
Pages
20
Abstract
IPv6 specifies the Fragment Header, which is employed for the fragmentation and reassembly mechanisms. The Fragment Header contains an "Identification" field that, together with the IPv6 Source Address and the IPv6 Destination Address of a packet, identifies fragments that correspond to the same original datagram, such that they can be reassembled together by the receiving host. The only requirement for setting the Identification field is that the corresponding value must be different than that employed for any other fragmented datagram sent recently with the same Source Address and Destination Address. Some implementations use a simple global counter for setting the Identification field, thus leading to predictable Identification values. This document analyzes the security implications of predictable Identification values, and provides implementation guidance for setting the Identification field of the Fragment Header, such that the aforementioned security implications are mitigated.
Publication Date
2016-02-01
Status Note
Informational
DOI
10.17487/RFC7739
Link
https://doi.org/10.17487/RFC7739
Author(s)
Fernando Gont
Keyword(s)
Vulnerability, DoS, Protocol Identifiers
Latest version of IETF RFC 7739

Document Versions — IETF RFC 7739

  • ▶ IETF RFC 7739 (2016-02-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7739.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 7739, Security Implications of Predictable Fragment Identification Values. Available at https://doi.org/10.17487/RFC7739
Snippet:
IETF RFC 7739, Security Implications of Predictable Fragment Identification Values. Available at https://doi.org/10.17487/RFC7739

HTML (ISO 690 compliant)

Preview:
IETF RFC 7739, Security Implications of Predictable Fragment Identification Values. Available at https://doi.org/10.17487/RFC7739
Snippet:
<span class="citation"><cite>IETF RFC 7739</cite>, Security Implications of Predictable Fragment Identification Values. Available at <a href="https://doi.org/10.17487/RFC7739" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7739</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 7739, Security Implications of Predictable Fragment Identification Values
doi: 10.17487/RFC7739
url: https://doi.org/10.17487/RFC7739
Snippet:
<li>
<cite id="bib-rfc7739">IETF RFC 7739</cite>, Security Implications of Predictable Fragment Identification Values
<span class="doi">10.17487/RFC7739</span>
</li>

Referenced By