CVE-2016-10142

CVE-2016-10142 describes a vulnerability in the IPv6 protocol specification related to ICMP Packet Too Big (PTB) messages, affecting all IPv6 implementations. An attacker can exploit this by sending a forged ICMPv6 PTB message to trigger the generation of IPv6 atomic fragments, even when not needed. This can lead to a Denial of Service (DoS) by causing legitimate traffic to be dropped by intermediate nodes or ACLs that filter fragmented packets. With a CVSS score of 8.6 (High), the attack is network-based, low complexity, and requires no user interaction, resulting in high availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, though it has received some community discussion and media coverage.