Description
nf_conntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IP_CT_ESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10457 ↗
- http://www.redhat.com/support/errata/RHSA-2007-0347.html ↗
- http://www.ubuntu.com/usn/usn-464-1 ↗
- http://www.novell.com/linux/security/advisories/2007_43_kernel.html ↗
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.3 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:171 ↗
- http://www.vupen.com/english/advisories/2007/0944 ↗
- http://www.debian.org/security/2007/dsa-1289 ↗
- http://secunia.com/advisories/25288 ↗
- http://secunia.com/advisories/26620 ↗
- http://secunia.com/advisories/25228 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 ↗
- http://secunia.com/advisories/25961 ↗
- http://secunia.com/advisories/24492 ↗
- http://secunia.com/advisories/25392 ↗
- http://www.osvdb.org/33028 ↗
- http://www.securityfocus.com/bid/23976 ↗