kernel: firewall bypass [LWN.net]

Package(s):

kernel

CVE #(s):

CVE-2012-4444

Created:

December 11, 2012

Updated:

December 19, 2012

Description:

From the Ubuntu advisory:

Zhang Zuotao discovered a bug in the Linux kernel's handling of overlapping fragments in ipv6. A remote attacker could exploit this flaw to bypass firewalls and initial new network connections that should have been blocked by the firewall.

Alerts:

Ubuntu	USN-1660-1	2012-12-10
Ubuntu	USN-1661-1	2012-12-10
Red Hat	RHSA-2012:1580-01	2012-12-18
CentOS	CESA-2012:1580	2012-12-19
Scientific Linux	SL-kern-20121219	2012-12-19
Oracle	ELSA-2012-1580	2012-12-19
Ubuntu	USN-1664-1	2012-12-12
Oracle	ELSA-2012-2048	2012-12-20
Oracle	ELSA-2012-2048	2012-12-20
Red Hat	RHSA-2013:0168-01	2013-01-22
CentOS	CESA-2013:0168	2013-01-23
Oracle	ELSA-2013-0168	2013-01-23
Oracle	ELSA-2013-0168	2013-01-23
Scientific Linux	SL-kern-20130123	2013-01-23

(Log in to post comments)