Search/CVE-2014-8160
● CVE

CVE-2014-8160

Vendordebian, suse, linux, canonical, redhatProductdebian linux, linux enterprise desktop, linux enterprise server, linux enterprise software development kit, linux kernel, ubuntu linux, enterprise linux server, enterprise linux server aus, enterprise linux server tus, enterprise linux desktop, linux enterprise real time extension, linux enterprise workstation extension, enterprise linux workstation, enterprise linux server eus, opensuseDiscoveredMar 2, 2015UpdatedMay 6, 2026

net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.

CVSS v3.1
—
EPSS
5.49%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage