CVE-2012-2663

extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended…

published February 15, 2014

CVSS
—
EPSS
3%
Percentile
85.9
In the wild
Unconfirmed
What it is

extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02737 · 85.9th percentile
Published
2014-02-15T11:00Z
EPSS history
Timeline
  • 15 FEB 11:00Z
    extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended…
    cvelistv5