Launchpad.net

CVE 2012-2663

extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant.

Related bugs and status

CVE-2012-2663 (Candidate) is related to these bugs:

Bug #1007091: CVE-2012-2663

		In	Importance	Status
1007091	CVE-2012-2663	linux (Ubuntu)	Low	Invalid
1007091	CVE-2012-2663	linux-fsl-imx51 (Ubuntu)	Low	Invalid
1007091	CVE-2012-2663	linux-mvl-dove (Ubuntu)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-maverick (Ubuntu)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-natty (Ubuntu)	Low	Invalid
1007091	CVE-2012-2663	linux-ti-omap4 (Ubuntu)	Low	Invalid
1007091	CVE-2012-2663	linux-ec2 (Ubuntu)	Low	Invalid
1007091	CVE-2012-2663	linux (Ubuntu Quantal)	Low	Invalid
1007091	CVE-2012-2663	linux-ec2 (Ubuntu Quantal)	Low	Invalid
1007091	CVE-2012-2663	linux-fsl-imx51 (Ubuntu Quantal)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-maverick (Ubuntu Quantal)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-natty (Ubuntu Quantal)	Low	Invalid
1007091	CVE-2012-2663	linux-mvl-dove (Ubuntu Quantal)	Low	Invalid
1007091	CVE-2012-2663	linux-ti-omap4 (Ubuntu Quantal)	Low	Invalid
1007091	CVE-2012-2663	linux (Ubuntu Precise)	Low	Invalid
1007091	CVE-2012-2663	linux-ec2 (Ubuntu Precise)	Low	Invalid
1007091	CVE-2012-2663	linux-fsl-imx51 (Ubuntu Precise)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-maverick (Ubuntu Precise)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-natty (Ubuntu Precise)	Low	Invalid
1007091	CVE-2012-2663	linux-mvl-dove (Ubuntu Precise)	Low	Invalid
1007091	CVE-2012-2663	linux-ti-omap4 (Ubuntu Precise)	Low	Invalid
1007091	CVE-2012-2663	linux (Ubuntu Oneiric)	Low	Invalid
1007091	CVE-2012-2663	linux-ec2 (Ubuntu Oneiric)	Low	Invalid
1007091	CVE-2012-2663	linux-fsl-imx51 (Ubuntu Oneiric)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-maverick (Ubuntu Oneiric)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-natty (Ubuntu Oneiric)	Low	Invalid
1007091	CVE-2012-2663	linux-mvl-dove (Ubuntu Oneiric)	Low	Invalid
1007091	CVE-2012-2663	linux-ti-omap4 (Ubuntu Oneiric)	Low	Invalid
1007091	CVE-2012-2663	linux (Ubuntu Natty)	Low	Invalid
1007091	CVE-2012-2663	linux-ec2 (Ubuntu Natty)	Low	Invalid
1007091	CVE-2012-2663	linux-fsl-imx51 (Ubuntu Natty)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-maverick (Ubuntu Natty)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-natty (Ubuntu Natty)	Low	Invalid
1007091	CVE-2012-2663	linux-mvl-dove (Ubuntu Natty)	Low	Invalid
1007091	CVE-2012-2663	linux-ti-omap4 (Ubuntu Natty)	Low	Invalid
1007091	CVE-2012-2663	linux (Ubuntu Lucid)	Low	Invalid
1007091	CVE-2012-2663	linux-ec2 (Ubuntu Lucid)	Low	Invalid
1007091	CVE-2012-2663	linux-fsl-imx51 (Ubuntu Lucid)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-maverick (Ubuntu Lucid)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-natty (Ubuntu Lucid)	Low	Invalid
1007091	CVE-2012-2663	linux-mvl-dove (Ubuntu Lucid)	Low	Invalid
1007091	CVE-2012-2663	linux-ti-omap4 (Ubuntu Lucid)	Low	Invalid
1007091	CVE-2012-2663	linux (Ubuntu Hardy)	Low	Invalid
1007091	CVE-2012-2663	linux-ec2 (Ubuntu Hardy)	Low	Invalid
1007091	CVE-2012-2663	linux-fsl-imx51 (Ubuntu Hardy)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-maverick (Ubuntu Hardy)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-natty (Ubuntu Hardy)	Low	Invalid
1007091	CVE-2012-2663	linux-mvl-dove (Ubuntu Hardy)	Low	Invalid
1007091	CVE-2012-2663	linux-ti-omap4 (Ubuntu Hardy)	Low	Invalid
1007091	CVE-2012-2663	linux-armadaxp (Ubuntu)	Low	Invalid
1007091	CVE-2012-2663	linux-armadaxp (Ubuntu Hardy)	Low	Invalid
1007091	CVE-2012-2663	linux-armadaxp (Ubuntu Lucid)	Low	Invalid
1007091	CVE-2012-2663	linux-armadaxp (Ubuntu Natty)	Low	Invalid
1007091	CVE-2012-2663	linux-armadaxp (Ubuntu Oneiric)	Low	Invalid
1007091	CVE-2012-2663	linux-armadaxp (Ubuntu Precise)	Low	Invalid
1007091	CVE-2012-2663	linux-armadaxp (Ubuntu Quantal)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-oneiric (Ubuntu)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-oneiric (Ubuntu Hardy)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-oneiric (Ubuntu Lucid)	Low	Won't Fix
1007091	CVE-2012-2663	linux-lts-backport-oneiric (Ubuntu Natty)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-oneiric (Ubuntu Oneiric)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-oneiric (Ubuntu Precise)	Low	Invalid
1007091	CVE-2012-2663	linux-lts-backport-oneiric (Ubuntu Quantal)	Low	Invalid

See the

CVE page on Mitre.org for more details.

References

MISC: http://www.spinics.net...
MISC: https://bugzilla.redha...