nf_conntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IP_CT_ESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 16, 2007 |
| Suse | — | Upgrade kernel-bigsmpUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade suse-releaseUpgrade kernel-xenUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-iseries64Upgrade kernel-ppc64 | Feb 17, 2015 | Mar 16, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.15-28-powerpcUpgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.15-28-mckinleyUpgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.17-11-itaniumUpgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.15-28-amd64-genericUpgrade linux-image-2.6.17-11-serverUpgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.17-11-powerpc64-smpUpgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.15-28-serverUpgrade linux-image-2.6.15-28-386Upgrade linux-image-2.6.17-11-powerpc-smpUpgrade linux-image-2.6.15-28-hppa64Upgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-image-2.6.17-11-genericUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.15-28-hppa32-smpUpgrade linux-image-2.6.17-11-server-bigironUpgrade linux-image-2.6.15-28-itaniumUpgrade linux-image-2.6.15-28-hppa32Upgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.17-11-sparc64-smpUpgrade linux-image-2.6.17-11-hppa32Upgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.17-11-386Upgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.17-11-mckinleyUpgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.17-11-hppa64Upgrade linux-image-2.6.17-11-sparc64Upgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.17-11-powerpcUpgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.15-28-hppa64-smpUpgrade linux-image-2.6.15-28-mckinley-smpUpgrade linux-image-2.6.15-28-itanium-smp | Nov 8, 2024 | Mar 16, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub