Recent security research seems to indicate that a number of IPv6 Neighbor Discovery implementations fail to implement basic sanity checks on received packets and/or fail to properly manage protocol data structures, being subject of trivial Denial of Service (DoS) attacks. Additionally, some IPv6 protocol features allow a number of attacks, ranging from man-in-the-middle to Denial of Service (DoS). This document discusses how to conduct a security/robustness assessment of Neighbor Discovery implementations by means of the SI6 Networks’ IPv6 toolkit – a free, portable, and fully-featured IPv6 security assessment and trouble-shooting toolkit. Additionally, it provides pointers to ongoing work in this area, such that the aforementioned issues can be mitigated where appropriate.
You can download it from the following link: https://packetstormsecurity.com/files/download/118897/si6networks-ipv6-nd-assessment.pdf
Source: https://packetstormsecurity.com/files/118897/Security-Robustness-Assessment-Of-IPv6-ND-Implementations.html

