NetSight
IP …
medium5.0

CVE-2014-8160

net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets …

Impact

net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.18
OpensuseOpensuse
Version 13.1
SuseLinux Enterprise Desktop
Version 12
SuseLinux Enterprise Real Time Extension
Version 11
SuseLinux Enterprise Server
Versions 11, 12
SuseLinux Enterprise Software Development Kit
Version 12
SuseLinux Enterprise Workstation Extension
Version 12
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 6.5, 6.6, 7.3, 7.6
RedhatEnterprise Linux Server Eus
Versions 6.5, 6.6, 7.3, 7.4, 7.5, 7.6
RedhatEnterprise Linux Server Tus
Versions 6.5, 6.6, 7.6, 7.7

Weakness classification

CWE-20

References