Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

netfilter CVEs

Beta · best-effort

5 CVEs tagged to vendor netfilter — 0 Critical, 1 High, 3 Medium, 1 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2019-11360

Published Jul 12, 2019

A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted ipt…

CVSS 4.2 · Medium

Vendor/product tagsBeta · best-effort

CVE-2015-6496

Published Aug 24, 2015

conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of s…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2012-2663

Published Feb 15, 2014

extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions vi…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2001-1387

Published Nov 5, 2001

iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses th…

CVSS 2.1 · Low

Vendor/product tagsBeta · best-effort

CVE-2001-1388

Published Nov 5, 2001

iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than in…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1