Lucene search

K

Netfilter Security Vulnerabilities

cve
cve

CVE-2019-11360

A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in...

4.2CVSS

4.8AI Score

0.002EPSS

2019-07-12 02:15 PM
261
cve
cve

CVE-2001-1387

iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information...

6.8AI Score

0.0004EPSS

2002-08-31 04:00 AM
23
cve
cve

CVE-2015-6496

conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service (crash) via a (1) DCCP, (2) SCTP, or (3) ICMPv6...

6.3AI Score

0.02EPSS

2015-08-24 02:59 PM
32
cve
cve

CVE-2012-2663

extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less...

9.1AI Score

0.005EPSS

2014-02-15 02:57 PM
57
3
cve
cve

CVE-2001-1388

iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the...

7AI Score

0.001EPSS

2002-08-31 04:00 AM
24
2