Vulnerability CVE-2012-2663: Information

Description

extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant.

Severity: HIGH (7.5)

URL: https://nvd.nist.gov/vuln/detail/CVE-2012-2663
Published: Feb. 15, 2014
Modified: Nov. 7, 2023

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
iptablessisyphus1.8.3-alt11.8.10-alt1ALT-PU-2019-1927-1229848Fixed
iptablesp101.8.3-alt11.8.7-alt1ALT-PU-2019-1927-1229848Fixed
iptablesp91.8.3-alt21.8.3-alt2ALT-PU-2019-2827-1238412Fixed
iptablesc10f11.8.3-alt11.8.7-alt1ALT-PU-2019-1927-1229848Fixed
iptablesc9f21.8.3-alt21.8.3-alt2ALT-PU-2019-2827-1238412Fixed
iptablesp111.8.3-alt11.8.10-alt1ALT-PU-2019-1927-1229848Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
[netfilter-devel] 20120330 Re: `iptables -m tcp --syn` doesn't do what the man says
  • Patch
  • Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=826702
  • Issue Tracking
  • Mitigation
  • Patch
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:netfilter:iptables:*:*:*:*:*:*:*:*
      End including
      1.4.21
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top