Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2024-27015
HistoryMay 01, 2024 - 6:15 a.m.

CVE-2024-27015

2024-05-0106:15:20
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
linux kernel
netfilter
flowtable
pppoe
tuple
vulnerability

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: incorrect pppoe tuple

pppoe traffic reaching ingress path does not match the flowtable entry
because the pppoe header is expected to be at the network header offset.
This bug causes a mismatch in the flow table lookup, so pppoe packets
enter the classical forwarding path.

Affected configurations

NVD
Node
linuxlinux_kernelRange5.13–5.15.157
OR
linuxlinux_kernelRange5.16–6.1.88
OR
linuxlinux_kernelRange6.2–6.6.29
OR
linuxlinux_kernelRange6.7–6.8.8
OR
linuxlinux_kernelMatch6.9rc1
OR
linuxlinux_kernelMatch6.9rc2
OR
linuxlinux_kernelMatch6.9rc3
OR
linuxlinux_kernelMatch6.9rc4
Node
fedoraprojectfedoraMatch38
OR
fedoraprojectfedoraMatch39
OR
fedoraprojectfedoraMatch40

Related

vulnrichment 1
cbl_mariner 1
redhatcve 1
cvelist 1
cve 1
ubuntucve 1
debiancve 1
osv 1
nessus 4
debian 1
openvas 4
fedora 3
vulnrichment
vulnrichment
CVE-2024-27015 netfilter: flowtable: incorrect pppoe tuple
2024-05-01 05:29:52
cbl_mariner
cbl_mariner
CVE-2024-27015 affecting package kernel for versions less than 5.15.158.1-1
2024-06-12 22:23:00
redhatcve
redhatcve
CVE-2024-27015
2024-05-01 19:18:14
cvelist
cvelist
CVE-2024-27015 netfilter: flowtable: incorrect pppoe tuple
2024-05-01 05:29:52
cve
cve
CVE-2024-27015
2024-05-01 06:15:20
ubuntucve
ubuntucve
CVE-2024-27015
2024-05-01 00:00:00
debiancve
debiancve
CVE-2024-27015
2024-05-01 06:15:20
osv
osv
linux - security update
2024-05-06 00:00:00
nessus
nessus
Debian dsa-5680 : affs-modules-6.1.0-21-4kc-malta-di - security update
2024-05-06 00:00:00
Fedora 39 : kernel (2024-bc0db39a14)
2024-05-02 00:00:00
Fedora 38 : kernel (2024-f35f9525d6)
2024-05-02 00:00:00
debian
debian
[SECURITY] [DSA 5680-1] linux security update
2024-05-06 17:40:02
openvas
openvas
Debian: Security Advisory (DSA-5680-1)
2024-05-07 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2024-f35f9525d6)
2024-05-27 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2024-010fe8772a)
2024-05-27 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: kernel-6.8.8-200.fc39
2024-05-03 01:34:06
[SECURITY] Fedora 40 Update: kernel-6.8.8-300.fc40
2024-05-03 01:49:00
[SECURITY] Fedora 38 Update: kernel-6.8.8-100.fc38
2024-05-03 01:38:45

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for NVD:CVE-2024-27015
vulnrichment1cbl_mariner1redhatcve1cvelist1cve1ubuntucve1debiancve1osv1nessus4debian1openvas4fedora3