ip6_tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to (1) bypass a rule that disallows a protocol, via a packet with the protocol header not located immediately after the fragment header, aka "ip6_tables protocol bypass bug;" and (2) bypass a rule that looks for a certain extension header, via a packet with an extension header outside the first fragment, aka "ip6_tables extension header bypass bug."
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-xenUpgrade kernel-symsUpgrade ltrace-32bitUpgrade kernel-iseries64Upgrade device-mapper-32bitUpgrade kernel-sourceUpgrade icecreamUpgrade lkcdutilsUpgrade rsyncUpgrade sysstatUpgrade kernel-bigsmpUpgrade kernel-smpUpgrade lkcdutils-netdump-serverUpgrade device-mapper-x86Upgrade ltraceUpgrade kernel-defaultUpgrade gfxbootUpgrade kernel-xenpaeUpgrade kernel-debugUpgrade device-mapperUpgrade kernel-ppc64Upgrade device-mapper-64bitUpgrade kernel-kdumpUpgrade oprofileUpgrade ltrace-64bit | Feb 17, 2015 | Nov 6, 2006 |
| Ubuntu | — | Upgrade linux-image-2.6.15-28-serverUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.15-27-sparc64-smpUpgrade linux-image-2.6.17-10-powerpc64-smpUpgrade linux-image-2.6.17-11-sparc64-smpUpgrade linux-image-2.6.12-10-sparc64Upgrade linux-image-2.6.15-27-serverUpgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-image-2.6.17-10-powerpcUpgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.17-10-sparc64Upgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.15-28-386Upgrade linux-image-2.6.17-11-386Upgrade linux-image-2.6.17-10-server-bigironUpgrade linux-image-2.6.17-10-genericUpgrade linux-image-2.6.15-27-amd64-k8Upgrade linux-image-2.6.15-27-amd64-xeonUpgrade linux-image-2.6.15-27-server-bigironUpgrade linux-image-2.6.17-11-powerpc64-smpUpgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.17-11-genericUpgrade linux-image-2.6.17-10-sparc64-smpUpgrade linux-image-2.6.15-27-powerpc64-smpUpgrade linux-image-2.6.15-28-amd64-genericUpgrade linux-image-2.6.17-11-powerpc-smpUpgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.17-10-serverUpgrade linux-image-2.6.17-11-powerpcUpgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.15-27-sparc64Upgrade linux-image-2.6.15-27-powerpc-smpUpgrade linux-image-2.6.15-27-amd64-genericUpgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.15-27-386Upgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.17-11-serverUpgrade linux-image-2.6.17-10-powerpc-smpUpgrade linux-image-2.6.17-10-386Upgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.15-27-powerpcUpgrade linux-image-2.6.15-27-amd64-serverUpgrade linux-image-2.6.12-10-386Upgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.17-11-server-bigironUpgrade linux-image-2.6.12-10-sparc64-smpUpgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.15-28-powerpcUpgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.15-27-686Upgrade linux-image-2.6.17-11-sparc64Upgrade linux-source-2.6.15Upgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.15-27-k7Upgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.12-10-686 | Nov 8, 2024 | Nov 7, 2006 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub