RFC 3128: Protection Against a Variant of the Tiny Fragment Attack (RFC 1858)

This document discusses how RFC 1858 compliant filters can be vulnerable to a variant of the "Tiny Fragment Attack" described in section 3.1 of the RFC. This…

Read RFC 3128 on the RFC Editor

Outgoing relationships (1 related RFC)

Updates — RFC 1858: Security Considerations for IP Fragment Filtering

Incoming relationships (8 related RFCs)

Normatively referenced by — RFC 7588: A Widely Deployed Solution to the Generic Routing Encapsulation (GRE) Fragmentation Problem
Informatively referenced by — RFC 4787: Network Address Translation (NAT) Behavioral Requirements for Unicast UDP
Informatively referenced by — RFC 7597: Mapping of Address and Port with Encapsulation (MAP-E)
Informatively referenced by — RFC 4942: IPv6 Transition/Co-existence Security Considerations
Informatively referenced by — RFC 8900: IP Fragmentation Considered Fragile
Informatively referenced by — RFC 4966: Reasons to Move the Network Address Translator - Protocol Translator (NAT-PT) to Historic Status
Informatively referenced by — RFC 4036: Management Information Base for Data Over Cable Service Interface Specification (DOCSIS) Cable Modem Termination Systems for Subscriber Management
Informatively referenced by — RFC 4639: Cable Device Management Information Base for Data-Over-Cable Service Interface Specification (DOCSIS) Compliant Cable Modems and Cable Modem Termination Systems