Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 10 min 162 bronnen 13 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2014-8160

MEDIUM · 5.0 CVSS Gepubliceerd: CWE-20

Beschrijving

net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.

Vendors

Linux Opensuse Suse Redhat Debian Canonical

Affected products

Linux Kernel Opensuse Linux Enterprise Desktop Linux Enterprise Real Time Extension Linux Enterprise Server Linux Enterprise Software Development Kit Linux Enterprise Workstation Extension Enterprise Linux Desktop Enterprise Linux Server Enterprise Linux Server Aus Enterprise Linux Server Eus Enterprise Linux Server Tus Enterprise Linux Workstation Debian Linux Ubuntu Linux

References