net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-firmwareUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-abi-whitelistsUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-headers | Dec 1, 2016 | Mar 2, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 2, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 25, 2014 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade kernel-docs | Dec 18, 2015 | Mar 2, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.2.0-77-powerpc-smpUpgrade linux-image-3.2.0-77-omapUpgrade linux-image-3.2.0-77-powerpc64-smpUpgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-3.2.0-1460-omap4Upgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-3.16.0-31-genericUpgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-3.2.0-77-virtualUpgrade linux-image-3.2.0-77-genericUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.2.0-77-highbankUpgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-3.2.0-77-generic-paeUpgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-3.13.0-46-genericUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-3.13.0-46-powerpc-smp | Nov 8, 2024 | Mar 2, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub