Uploaded image for project: 'LWIP based TCP/IP'
  1. LWIP based TCP/IP
  2. PSLWIP-579

ARP Replies Accepted Without Prior ARP Request

    Details

    • Account:
      SPC TCP_IP (SPCTCPIP)

      Description

      Implementation accepts ARP Response frames and adds corresponding entry to ARP cache even if no ARP Request was sent.
      A counter measure shall be taken to prevent this easy way for ARP spoofing attacks as follows. The IP stack shall only consider ARP responses for pending ARP requests.

        Attachments

          Issue Links

            Expenses

              Activity

                Status Description

                  People

                  • Reporter:
                    BMeyer Benjamin Meyer
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    0 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: