Ietf Rfc2003 Ip Encapsulation Within Ip vulnerabilities

CVE-2020-10136 [MEDIUM] CWE-290 IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsula