ip6_tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to (1) bypass a rule that disallows a protocol, via a packet with the protocol header not located immediately after the fragment header, aka "ip6_tables protocol bypass bug;" and (2) bypass a rule that looks for a certain extension header, via a packet with an extension header outside the first fragment, aka "ip6_tables extension header bypass bug."
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade device-mapper-32bitUpgrade icecreamUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-bigsmpUpgrade ltrace-32bitUpgrade kernel-smpUpgrade kernel-iseries64Upgrade rsyncUpgrade lkcdutils-netdump-serverUpgrade sysstatUpgrade lkcdutilsUpgrade kernel-xenUpgrade device-mapper-x86Upgrade oprofileUpgrade ltrace-64bitUpgrade kernel-xenpaeUpgrade kernel-defaultUpgrade device-mapperUpgrade device-mapper-64bitUpgrade kernel-ppc64Upgrade ltraceUpgrade kernel-debugUpgrade kernel-kdumpUpgrade gfxboot | Feb 17, 2015 | Nov 6, 2006 |
| Ubuntu | — | Upgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.15-27-k7Upgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.17-10-386Upgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.17-11-server-bigironUpgrade linux-image-2.6.15-27-amd64-serverUpgrade linux-image-2.6.15-27-powerpcUpgrade linux-image-2.6.12-10-k7Upgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.17-11-sparc64Upgrade linux-image-2.6.15-27-686Upgrade linux-image-2.6.15-28-powerpcUpgrade linux-source-2.6.15Upgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.17-11-serverUpgrade linux-image-2.6.12-10-sparc64-smpUpgrade linux-image-2.6.12-10-386Upgrade linux-image-2.6.17-10-powerpc-smpUpgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.15-27-386Upgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.17-11-powerpc-smpUpgrade linux-image-2.6.17-10-powerpc64-smpUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.15-27-amd64-genericUpgrade linux-image-2.6.17-11-powerpcUpgrade linux-image-2.6.15-27-sparc64-smpUpgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.17-11-genericUpgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.15-27-powerpc-smpUpgrade linux-image-2.6.15-27-powerpc64-smpUpgrade linux-image-2.6.15-27-amd64-k8Upgrade linux-image-2.6.17-10-powerpcUpgrade linux-image-2.6.17-10-genericUpgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.15-27-sparc64Upgrade linux-image-2.6.17-10-sparc64-smpUpgrade linux-image-2.6.15-28-amd64-genericUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.17-10-serverUpgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.17-11-powerpc64-smpUpgrade linux-image-2.6.17-10-sparc64Upgrade linux-image-2.6.15-27-server-bigironUpgrade linux-image-2.6.15-28-serverUpgrade linux-image-2.6.15-28-386Upgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.17-11-386Upgrade linux-image-2.6.17-10-server-bigironUpgrade linux-image-2.6.12-10-sparc64Upgrade linux-image-2.6.15-27-serverUpgrade linux-image-2.6.17-11-sparc64-smpUpgrade linux-image-2.6.15-27-amd64-xeonUpgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-image-2.6.12-10-amd64-k8 | Nov 8, 2024 | Nov 7, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub