A security issue has been reported in Apple AirPort Extreme Base Station, which can be exploited by malicious people to cause a DoS (Denial of Service).

The security issue is caused due to an error within the processing of packets with IPv6 type 0 route headers. This can be exploited to cause a DoS due to high network traffic by sending specially crafted IPv6 packets to vulnerable systems.

The security issue is reported in firmware versions prior to 7.2.1.

NOTE: This security issue does reportedly not affect the Gigabit Ethernet version of AirPort Extreme Base Station with 802.11n*.

Solution
Update to firmware version 7.2.1.
Further details available to Secunia VIM customers

Provided and/or discovered by
Originally reported by Philippe Biondi and Arnaud Ebalard

Original Advisory
Apple:
http://docs.info.apple.com/article.html?artnum=306375

http://www.secdev.org/conf/IPv6_RH_security-csw07.pdf

Deep Links
Links available to Secunia VIM customers