Bug 8618 - iptables has open CVE: CVE-2012-2663
Summary: iptables has open CVE: CVE-2012-2663
Status: RESOLVED WONTFIX
Alias: None
Product: OE-Core
Classification: Build System, Metadata & Runtime
Component: connectivity (show other bugs)
Version: unspecified
Hardware: x86 Multiple
: Medium normal
Target Milestone: 2.0.1
Assignee: Armin Kuster
QA Contact:
URL:
Whiteboard:
Depends on:
Blocks:
 
Reported: 2015-10-30 07:02 UTC by Elena Reshetova
Modified: 2016-02-16 22:38 UTC (History)
3 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: No (bug/feature does not impact docs)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Comment 1 Armin Kuster 2016-02-16 22:38:59 UTC 
wont fix. this affects older kernels and trying to fix this in iptables will most likely branch backward compatibility.

Mitigation:

Instead of --syn use --tcp-flags SYN,RST,ACK SYN in your rulesets in case you want to also match packets with both SYN+FIN flags set.