Description
Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | iptables | 1.2.11-4 | — |
| Debian 13 | iptables | 1.2.11-4 | — |
| Debian 12 | iptables | 1.2.11-4 | — |
| Debian 3.0 | iptables | 1.2.6a-5.0woody2 | DSA-580-1 |
Advisories 1
- DSA-580-1 iptables - missing initialisation Debian Security (DSA / DLA) · Mar 9, 2026
References
- 11570 vdb-entry
- FLSA:2252 vendor-advisory
- DSA-580 vendor-advisory
- iptables-module-dos(17928) vdb-entry
- MDKSA-2004:125 vendor-advisory
- P-026 third-party-advisory government-resource
- USN-81-1 vendor-advisory
- http://rpmfind.net/linux/RPM/suse/updates/9.2/i386/rpm/i586/iptables-1.2.11-4.2.i586.html