CVE-2015-6496: Undefined Security Weakness

conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service crash via a 1 DCCP, 2 SCTP, or 3 ICMPv6 packet...

Debian DSA-3341-1 : conntrack - security update

It was discovered that in certain configurations, if the relevant conntrack kernel module is not loaded, conntrackd will crash when handling DCCP, SCTP or ICMPv6 packets. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

[SECURITY] [DSA 3341-1] conntrack security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3341-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 20, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3341-1] conntrack security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3341-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 20, 2015 https://www.debian.org/security/faq -...

Debian DLA-295-1 : conntrack security update

'jann' discovered that in certain configurations, if the relevant conntrack kernel module is not loaded, conntrackd will crash when handling DCCP, SCTP or ICMPv6 packets. In the version found in Debian 6.0 'squeeze', this vulnerability only applies to ICMPv6. For the oldoldstable distribution...

DSA-3341-1 conntrack - security update

Bulletin has no description...

Debian Security Advisory DSA 3341-1 (conntrack - security update)

It was discovered that in certain configurations, if the relevant conntrack kernel module is not loaded, conntrackd will crash when handling DCCP, SCTP or ICMPv6 packets. OpenVAS Vulnerability Test $Id: deb3341.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3341-1 usin...

SUSE-SU-2015:1683-1 Security update for conntrack-tools

Fix a possible crash if conntrackd sees DCCP, SCTP and ICMPv6 traffic and the corresponding kernel modules that track this traffic are not available. bsc942149, CVE-2015-6496...

PT-2015-7270

Name of the Vulnerable Software and Affected Versions conntrack-tools versions 1.4.2 and earlier Description The issue allows remote attackers to cause a denial of service crash via specific types of packets, including DCCP, SCTP, or ICMPv6 packets, due to the failure of conntrackd to ensure that...

DLA-295-1 conntrack - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3341-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : kernel (MDVSA-2015:057)

Multiple vulnerabilities has been found and corrected in the Linux kernel : The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AFALG socket with a parenthesized module template expression in the salgname field, as...

CVE-2014-8160

net/netfilter/nfconntrackprotogeneric.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with...

Design/Logic Flaw

net/netfilter/nfconntrackprotogeneric.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with...

CVE-2014-8160

CVE-2014-8160 : In the Linux kernel, net/netfilter/nf_conntrack_proto_generic.c before 3.18 generates incorrect conntrack entries when handling certain iptables rule sets for SCTP, DCCP, GRE, and UDP-Lite. This can allow remote attackers to bypass intended access restrictions by sending packets w...

CVE-2014-8160

net/netfilter/nfconntrackprotogeneric.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with...

CVE-2014-8160: Improper Input Validation

net/netfilter/nfconntrackprotogeneric.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with...

CVE-2014-8160

net/netfilter/nfconntrackprotogeneric.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with...

UBUNTU-CVE-2014-8160

net/netfilter/nfconntrackprotogeneric.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with...

RHEL 6 : kernel (RHSA-2014:0593)

Updated kernel packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 6.3 Extended Update Support. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which gi...