title: L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with an invalid length during Ethernet to Wifi frame translation
description: Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion (and optionally VLAN0 headers).
problem types: CWE-130 Improper Handling of Length Parameter
affected:
{
vendor: IEEE
product: 802.2
versions:
version: 802.2h-1997, status: affected, lessThanOrEqual: 802.2h-1997, versionType: custom
}
{
vendor: IETF
product: draft-ietf-v6ops-ra-guard-08
versions:
version: 08, status: affected, lessThanOrEqual: 08, versionType: custom
}
