← Back

Netfilter

netfilter

5 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Iptables
iptables
4 CVEs
Conntrack Tools
conntrack-tools
1 CVE

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-11360
1Netfilter
1Iptables
Jun 17, 2026
Jul 12, 2019
N/A· v4
4.2 MEDIUM· v3
3.5 LOW· v2
A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_p...Show more
A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c.Show less
CVE-2015-6496
2Debian
Netfilter
2Conntrack Tools
Debian Linux
May 6, 2026
Aug 24, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service (crash) via a (1) DCCP, (2) SCTP,...Show more
conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service (crash) via a (1) DCCP, (2) SCTP, or (3) ICMPv6 packet.Show less
CVE-2012-2663
1Netfilter
1Iptables
Apr 29, 2026
Feb 15, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-66...Show more
extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant.Show less
CVE-2001-1388
1Netfilter
1Iptables
Apr 16, 2026
Nov 5, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator.
CVE-2001-1387
1Netfilter
1Iptables
Apr 16, 2026
Nov 5, 2001
N/A· v4
N/A· v3
2.1 LOW· v2
iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possib...Show more
iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak.Show less