Description
TCP firewalls could be circumvented by sending a SYN Packets with other flags (like e.g. RST flag) set, which was not correctly discarded by the Linux TCP stack after firewalling.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | kernel | before Linux kernel 2.4.20 | — |
References
- [oss-security] 20120530 Re: CVE Request -- kernel: tcp: drop SYN+FIN messages mailing-list
- [oss-security] 20120530 Re: CVE Request -- kernel: tcp: drop SYN+FIN messages mailing-list
- [oss-security] 20120530 Re: CVE Request -- kernel: tcp: drop SYN+FIN messages mailing-list
- [oss-security] 20120530 Re: CVE Request -- kernel: tcp: drop SYN+FIN messages mailing-list
- [oss-security] 20120530 Re: CVE Request -- kernel: tcp: drop SYN+FIN messages mailing-list
- [oss-security] 20120203 Re: CVE Request (2002): Linux TCP stack could accept invalid TCP flag combinations mailing-list
- [oss-security] 20120529 Re: CVE Request (2002): Linux TCP stack could accept invalid TCP flag combinations mailing-list
- [oss-security] 20140212 Re: Old CVE ids, public, but still "RESERVED" mailing-list
- [oss-security] 20120530 Re: CVE Request -- kernel: tcp: drop SYN+FIN messages mailing-list
- [oss-security] 20120531 Re: CVE Request -- kernel: tcp: drop SYN+FIN messages mailing-list
- [oss-security] 20120530 CVE Request -- kernel: tcp: drop SYN+FIN messages mailing-list
- VU#464113 third-party-advisory
- https://www.kb.cert.org/vuls/id/464113%2C
- https://bugzilla.suse.com/show_bug.cgi?id=744994%2C
- https://www.openwall.com/lists/oss-security/2012/02/03/7
- https://security.netapp.com/advisory/ntap-20210727-0003/