NVD

Id
35367  
Name
CVE-2014-8160  
Description
net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-03-02  
Modified Date
2017-01-02  
Seq
2014-8160  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181297 35367 CVE-2014-8160 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=db29a9508a9246e77087c5531e45b2c88ec6988b  View
181298 35367 CVE-2014-8160 SUSE-SU-2015:0529  View
181299 35367 CVE-2014-8160 SUSE-SU-2015:0652  View
181300 35367 CVE-2014-8160 openSUSE-SU-2015:0714  View
181301 35367 CVE-2014-8160 SUSE-SU-2015:0736  View
181302 35367 CVE-2014-8160 RHSA-2015:0284  View
181303 35367 CVE-2014-8160 RHSA-2015:0290  View
181304 35367 CVE-2014-8160 RHSA-2015:0674  View
181305 35367 CVE-2014-8160 DSA-3170  View
181306 35367 CVE-2014-8160 MDVSA-2015:057  View
181307 35367 CVE-2014-8160 MDVSA-2015:058  View
181308 35367 CVE-2014-8160 [oss-security] 20150114 CVE-2014-8160 Linux Kernel: SCTP firewalling fails until SCTP module is loaded  View
181309 35367 CVE-2014-8160 72061  View
181310 35367 CVE-2014-8160 [netfilter-devel] 20140925 [PATCH nf] netfilter: conntrack: disable generic protocol tracking  View
181311 35367 CVE-2014-8160 USN-2513-1  View
181312 35367 CVE-2014-8160 USN-2514-1  View
181313 35367 CVE-2014-8160 USN-2515-1  View
181314 35367 CVE-2014-8160 USN-2516-1  View
181315 35367 CVE-2014-8160 USN-2517-1  View
181316 35367 CVE-2014-8160 USN-2518-1  View
181317 35367 CVE-2014-8160 https://bugzilla.redhat.com/show_bug.cgi?id=1182059  View
181318 35367 CVE-2014-8160 https://github.com/torvalds/linux/commit/db29a9508a9246e77087c5531e45b2c88ec6988b  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19074 JVNDB-2014-007949 Linux Kernel の net/netfilter/nf_conntrack_proto_generic.c におけるアクセス制限を回避される脆弱性 Linux Kernel の net/netfilter/nf_conntrack_proto_generic.c は、SCTP、DCCP、GRE、および UDP-Lite プロトコルに対する特定の iptables のルールセットの処理中に不正な conntrack エントリを生成するため、アクセス制限を回避される脆弱性が存在します。 CVE-2014-8160 75453 CVE-2014-8160 35367 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007949.html 2014-09-29 2015-06-09 View