extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | May 15, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 2, 2011 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-ppc64-develUpgrade kernel-xen-baseUpgrade kernel-ppc64Upgrade kernel-sourceUpgrade kernel-xen-develUpgrade kernel-trace-baseUpgrade kernel-traceUpgrade kernel-pae-baseUpgrade kernel-pae-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-xenUpgrade kernel-default-manUpgrade kernel-ppc64-baseUpgrade kernel-paeUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-trace-devel | Feb 17, 2015 | Sep 1, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub