CVE-2014-8160 | Mend Vulnerability Database

Vulnerability DatabaseCVE-2014-8160

CVE-2014-8160

Published:March 02, 2015

Updated:May 17, 2026

net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.

Related Resources (25)

https://access.redhat.com/security/cve/CVE-2014-8160

https://security-tracker.debian.org/tracker/CVE-2014-8160

http://www.ubuntu.com/usn/USN-2513-1

http://www.securityfocus.com/bid/72061

http://www.spinics.net/lists/netfilter-devel/msg33430.html

http://rhn.redhat.com/errata/RHSA-2015-0290.html

http://www.openwall.com/lists/oss-security/2015/01/14/3

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html

http://www.ubuntu.com/usn/USN-2514-1

https://bugzilla.redhat.com/show_bug.cgi?id=1182059