alert ip $HOME_NET any -> any any (msg:"ET EXPLOIT Possible Microsoft Windows IPv6 Fragmentation DoS (CVE-2024-38063)"; flowbits:isset,ET.CVE-2024-38063; content:"|60|"; depth:1; content:"|2c|"; distance:5; within:1; icmpv6.hdr; content:"|04 00|"; depth:2; reference:cve,2024-38063; classtype:denial-of-service; sid:2055644; rev:1; metadata:affected_product Windows_XP_Vista_7_8_10_Server_32_64_Bit, affected_product Windows_11, attack_target Client_and_Server, tls_state plaintext, created_at 2024_08_30, cve CVE_2024_38063, deployment Perimeter, deployment Internal, confidence Low, signature_severity Critical, updated_at 2024_08_30; target:src_ip;)