Input validation error in conntrack-tools - CVE-2015-6496
Published: August 24, 2015 / Updated: August 4, 2020
Vulnerability identifier: #VU33823
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-6496
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service (crash) via a (1) DCCP, (2) SCTP, or (3) ICMPv6 packet.
Affected software
conntrack-tools
conntrack-tools (Alpine package)
conntrack-tools
Fedora
conntrack-tools (Alpine package)
conntrack-tools
Fedora
How to mitigate CVE-2015-6496
Install update from vendor's website.
conntrack-tools (Alpine package) - update to 1.4.3-r0
conntrack-tools - addressed in versions 1.4.2-9.fc21, 1.4.2-9.fc22, 1.4.2-9.fc23
conntrack-tools - addressed in versions 1.4.2-9.fc21, 1.4.2-9.fc22, 1.4.2-9.fc23
External References
- http://bugzilla.netfilter.org/show_bug.cgi?id=910
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174875.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174883.html
- http://lists.opensuse.org/opensuse-updates/2015-10/msg00015.html
- http://www.debian.org/security/2015/dsa-3341
- http://www.openwall.com/lists/oss-security/2015/08/14/4
- http://www.openwall.com/lists/oss-security/2015/08/18/1
- https://git.netfilter.org/conntrack-tools/commit/?id=c392c159605956c7bd4a264ab4490e2b2704c0cd