Lucene search
416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2024-26673HistoryApr 02, 2024 - 7:15 a.m.
CVE-2024-26673
2024-04-0207:15:43
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
linux kernel
netfilter
nft_ct
layer 3
layer 4
protocol number
custom expectations
nfproto
ipv4
ipv6
inet
destination port
cve-2024-26673
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- Disallow families other than NFPROTO_{IPV4,IPV6,INET}.
- Disallow layer 4 protocol with no ports, since destination port is a
mandatory attribute for this object.
References
git.kernel.org/stable/c/0f501dae16b7099e69ee9b0d5c70b8f40fd30e98
git.kernel.org/stable/c/38cc1605338d99205a263707f4dde76408d3e0e8
git.kernel.org/stable/c/65ee90efc928410c6f73b3d2e0afdd762652c09d
git.kernel.org/stable/c/8059918a1377f2f1fff06af4f5a4ed3d5acd6bc4
git.kernel.org/stable/c/b775ced05489f4b77a35fe203e9aeb22f428e38f
git.kernel.org/stable/c/cfe3550ea5df292c9e2d608e8c4560032391847e
git.kernel.org/stable/c/f549f340c91f08b938d60266e792ff7748dae483
lists.debian.org/debian-lts-announce/2024/06/msg00017.html
Related
vulnrichment
vulnrichment
debiancve
debiancve
CVE-2024-26673
2024-04-02 07:15:43
ubuntucve
ubuntucve
CVE-2024-26673
2024-04-02 00:00:00
cvelist
cvelist
cve
cve
CVE-2024-26673
2024-04-02 07:15:43
redhatcve
redhatcve
CVE-2024-26673
2024-04-03 00:03:04
oraclelinux
oraclelinux
kernel security and bug fix update
2024-05-23 00:00:00
nessus
nessus
RHEL 9 : kernel (RHSA-2024:3306)
2024-05-23 00:00:00
Oracle Linux 9 : kernel (ELSA-2024-3306)
2024-05-25 00:00:00
RHEL 9 : kernel (RHSA-2024:3461)
2024-05-29 00:00:00
redhat
redhat
(RHSA-2024:3306) Moderate: kernel security and bug fix update
2024-05-23 05:51:19
(RHSA-2024:3461) Moderate: kernel security and bug fix update
2024-05-29 07:38:15
(RHSA-2024:3460) Moderate: kernel-rt security and bug fix update
2024-05-29 07:38:15
osv
osv
linux-bluefield vulnerabilities
2024-05-14 09:00:08
linux-aws, linux-aws-5.15 vulnerabilities
2024-05-20 13:05:13
openvas
openvas
Ubuntu: Security Advisory (USN-6767-2)
2024-05-15 00:00:00
Ubuntu: Security Advisory (USN-6767-1)
2024-05-08 00:00:00
Ubuntu: Security Advisory (USN-6766-1)
2024-05-08 00:00:00
ubuntu
ubuntu
Linux kernel (BlueField) vulnerabilities
2024-05-14 00:00:00
Linux kernel vulnerabilities
2024-05-07 00:00:00
Linux kernel (AWS) vulnerabilities
2024-05-20 00:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2024-06-05 19:11:11
debian
debian
[SECURITY] [DSA 5658-1] linux security update
2024-04-13 06:38:27
[SECURITY] [DSA 5681-1] linux security update
2024-05-06 18:31:39