extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | May 15, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 2, 2011 |
| Suse | — | Upgrade kernel-ppc64Upgrade kernel-ppc64-develUpgrade kernel-xen-develUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade kernel-traceUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-default-manUpgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade kernel-ppc64-baseUpgrade kernel-pae-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-docs | Feb 17, 2015 | Sep 1, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub