CVE-2006-4572

Published Nov 7, 2006 CVSS 2.0 · 7.5 High EPSS 3.9% KEV · Not listed
Description
ip6_tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to (1) bypass a rule that disallows a protocol, via a packet with the protocol header not located immediately after the fragment header, aka "ip6_tables protocol bypass bug;" and (2) bypass a rule that looks for a certain extension header, via a packet with an extension header outside the first fragment, aka "ip6_tables extension header bypass bug."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2006-4560 ip6_tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to (1) bypass a rule that disallows a protocol, via a packet with the protocol header not located immediately after the fragment header, aka "ip6_tables protocol bypass bug;" and (2) bypass a rule that looks for a certain extension header, via a packet with an extension header outside the first fragment, aka "ip6_tables extension header bypass bug."
Ubuntu USN Ubuntu USN USN-395-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-416-1 Linux kernel vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 7:14 PM
Reserved
Sep 6, 2006, 12:00 AM
Status
Modified
Published
Nov 7, 2006, 12:07 AM
Modified
Jun 16, 2026, 10:29 PM