CVE-2014-8160

net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets…

published March 2, 2015

CVSS
—
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05489 · 92.7th percentile
Published
2015-03-02T11:00Z
EPSS history
Timeline
  • 02 MAR 11:00Z
    net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets…
    cvelistv5