nf_conntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IP_CT_ESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 16, 2007 |
| Suse | — | Upgrade kernel-iseries64Upgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-ppc64Upgrade suse-releaseUpgrade kernel-symsUpgrade kernel-bigsmpUpgrade kernel-xenpaeUpgrade kernel-default | Feb 17, 2015 | Mar 16, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-image-2.6.15-28-mckinleyUpgrade linux-image-2.6.17-11-serverUpgrade linux-image-2.6.15-28-hppa64Upgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.15-28-386Upgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.15-28-powerpcUpgrade linux-image-2.6.15-28-serverUpgrade linux-image-2.6.17-11-powerpc-smpUpgrade linux-image-2.6.17-11-itaniumUpgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.17-11-genericUpgrade linux-image-2.6.15-28-amd64-genericUpgrade linux-image-2.6.17-11-powerpc64-smpUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.17-11-386Upgrade linux-image-2.6.17-11-hppa32Upgrade linux-image-2.6.17-11-sparc64Upgrade linux-image-2.6.17-11-sparc64-smpUpgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.15-28-hppa64-smpUpgrade linux-image-2.6.17-11-powerpcUpgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.15-28-hppa32Upgrade linux-image-2.6.15-28-mckinley-smpUpgrade linux-image-2.6.15-28-itaniumUpgrade linux-image-2.6.15-28-itanium-smpUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.17-11-mckinleyUpgrade linux-image-2.6.17-11-hppa64Upgrade linux-image-2.6.17-11-server-bigironUpgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.15-28-hppa32-smpUpgrade linux-image-2.6.20-16-itanium | Nov 8, 2024 | Mar 16, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub