CVE-2012-2663

Published: Feb 15, 2014Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant.

Affected (1)

Products: Netfilter: Iptables

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Netfilter Iptables	Up to 1.4.21

References (4)

http://www.spinics.net/lists/netfilter-devel/msg21248.html

Source: secalert@redhat.com

PatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=826702

Source: secalert@redhat.com

Issue TrackingMitigationPatchThird Party Advisory

http://www.spinics.net/lists/netfilter-devel/msg21248.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=826702

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingMitigationPatchThird Party Advisory

Timeline

No history available yet.