CVE-2015-6496
EUVD-2015-643724.08.2015, 14:59
conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service (crash) via a (1) DCCP, (2) SCTP, or (3) ICMPv6 packet.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| netfilter | conntrack-tools | 𝑥 ≤ 1.4.2 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| conntrack |
| ||||||||||||||||||||||
| conntrack-tools |
|
Common Weakness Enumeration
References