PT-2012-1249 · Netfilter+3 · Iptables+3

Denys Fedoryshchenko + 1 · Published 2012-03-30 · Updated 2024-11-02 · CVE-2012-2663

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions iptables versions through 1.4.21

Description The issue is related to insufficient input validation in the extensions/libxt tcp.c component of the iptables interface, which could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service using a specially crafted packet. The vulnerability might allow remote attackers to bypass intended firewall restrictions via crafted TCP SYN+FIN packets in --syn rules.

Recommendations For versions through 1.4.21, consider updating to a version that includes the fix for this issue, as the CVE-2012-6638 fix makes this issue less relevant. As a temporary workaround, consider restricting the use of the --syn rule to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2019-1927

ALT-PU-2019-2827

BDU:2023-07716

CVE-2012-2663

ECHO-EE0D-A49E-A573

Affected Products

Alt Linux

Debian

Suse

Iptables

References · 19

• https://bugzilla.redhat.com/show_bug.cgi?id=826702 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-2663 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-2663 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2012-2663 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-2663 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2019-1927 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07716 · Security Note
• https://cve.org/CVERecord?id=CVE-2012-2663 · Security Note
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81 · Vendor Advisory
• https://ubuntu.com/security/CVE-2012-2663 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2019-2827 · Vendor Advisory
• http://spinics.net/lists/netfilter-devel/msg21248.html · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-2663 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/iptables · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2663 · Security Note