CVE-2015-6496 conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service (crash) via a....
MediumCVSS 5.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service (crash) via a (1) DCCP, (2) SCTP, or (3) ICMPv6 packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netfilter conntrack-tools | <= 1.4.2 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- bugzilla.netfilter.org exploit issue-tracking third-party-advisory
- FEDORA-2015-5eb2131441 third-party-advisory vendor-advisory
- FEDORA-2015-1aee5e6f0b third-party-advisory vendor-advisory
- openSUSE-SU-2015:1688 mailing-list third-party-advisory vendor-advisory
- DSA-3341 third-party-advisory vendor-advisory
- [oss-security] 20150814 CVE request: conntrackd denial of service with unusual network traffic mailing-list third-party-advisory
- [oss-security] 20150817 Re: CVE request: conntrackd denial of service with unusual network traffic mailing-list third-party-advisory
- git.netfilter.org patch url-repurposed vendor-advisory