Lucene search
Ubuntu.comUB:CVE-2012-2663HistoryFeb 15, 2014 - 12:00 a.m.
CVE-2012-2663
2014-02-1500:00:00
ubuntu.com
ubuntu.com
12
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
75.8%
extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP
SYN+FIN packets in --syn rules, which might allow remote attackers to
bypass intended firewall restrictions via crafted packets. NOTE: the
CVE-2012-6638 fix makes this issue less relevant.
Bugs
Notes
| Author | Note |
|---|---|
| sbeattie | This is an iptables userspace issue. A kernel CVE was also assigned as CVE-2012-6638, which has been addressed in Ubuntu kernels. |
| mdeslaur | There is no available fix for this issue for iptables, and changing this would result in an unexpected change in behaviour. We will not be fixing this in Ubuntu stable releases, marking as ignored. |
Related
ubuntucve
ubuntucve
CVE-2012-6638
2014-02-15 00:00:00
debiancve
debiancve
CVE-2012-2663
2014-02-15 14:57:00
CVE-2012-6638
2014-02-15 14:57:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1855
2021-07-02 17:05:34
cve
cve
CVE-2012-6638
2014-02-15 14:57:00
CVE-2012-2663
2014-02-15 14:57:00
prion
prion
Design/Logic Flaw
2014-02-15 14:57:00
Code injection
2014-02-15 14:57:00
nessus
nessus
Oracle Linux 5 : ELSA-2014-0433-1: / kernel (ELSA-2014-04331)
2023-09-07 00:00:00
Oracle Linux 5 : kernel (ELSA-2014-0433-1)
2014-04-27 00:00:00
seebug
seebug
Linux Kernel 'tcp_rcv_state_process()'函数拒绝服务漏洞
2014-02-21 00:00:00
Linux kernel 2.6.x iptables '--syn'规则安全绕过漏洞
2012-06-01 00:00:00
f5
f5
K15304 : Linux kernel tcp_rcv_state_process vulnerability CVE-2012-6638
2014-09-26 00:00:00
SOL15304 - Linux kernel tcp_rcv_state_process vulnerability CVE-2012-6638
2014-06-02 00:00:00
redhat
redhat
(RHSA-2014:0433) Moderate: kernel security, bug fix, and enhancement update
2014-04-24 00:00:00
(RHSA-2014:0772) Important: kernel security and bug fix update
2014-06-19 00:00:00
openvas
openvas
CentOS Update for kernel CESA-2014:0433 centos5
2014-05-02 00:00:00
Oracle: Security Advisory (ELSA-2014-0433)
2015-10-06 00:00:00
CentOS Update for kernel CESA-2014:0433 centos5
2014-05-02 00:00:00
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2014-04-25 00:00:00
kernel security, bug fix, and enhancement update
2014-04-24 00:00:00
centos
centos
kernel security update
2014-04-25 10:56:20
ubuntu
ubuntu
Linux kernel (EC2) vulnerability
2012-12-04 00:00:00
Linux kernel vulnerability
2012-11-30 00:00:00
Linux kernel vulnerabilities
2012-08-10 00:00:00
suse
suse
Security update for Linux kernel (important)
2012-10-24 09:08:54
checkpoint_advisories
checkpoint_advisories
avleonov
avleonov
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
75.8%
Related for UB:CVE-2012-2663