CVE-2015-6496: Medium severity conntrack-tools vulnerability

Q: Which systems are exposed to this denial-of-service issue?

Systems running conntrackd from conntrack-tools 1.4.2 or earlier are affected when the relevant optional kernel modules are not loaded. The issue applies to handling of DCCP, SCTP, or ICMPv6 traffic.

Q: What does an attacker need to do to trigger the crash?

An unauthenticated remote attacker can send a DCCP, SCTP, or ICMPv6 packet. The attack does not require prior access or user interaction.

Published Aug 24, 2015

Updated

conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service (crash) via a (1) DCCP, (2) SCTP, or (3) ICMPv6 packet.

Affected Software

3 affected components

netfilter Conntrack-tools<=1.4.2

Debian Debian Linux=7.0

Debian Debian Linux=8.0

Remediation

Patch Available

https://git.netfilter.org/conntrack-tools/commit/?id=c392c159605956c7bd4a264ab4490e2b2704c0cd

Event History

Aug 24, 2015

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

Which systems are exposed to this denial-of-service issue?

Systems running conntrackd from conntrack-tools 1.4.2 or earlier are affected when the relevant optional kernel modules are not loaded. The issue applies to handling of DCCP, SCTP, or ICMPv6 traffic.

What does an attacker need to do to trigger the crash?

An unauthenticated remote attacker can send a DCCP, SCTP, or ICMPv6 packet. The attack does not require prior access or user interaction.

Is a fix available?

Yes. A patch is available.