CVE-2015-6496 Denial of service in n/a
Remote attackers can crash conntrackd by sending specific packets if optional kernel modules are not loaded, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-6496?
CVE-2015-6496 is a medium-severity denial of service vulnerability in Debian Debian Linux, published on 24 Aug 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service (crash) via a (1) DCCP, (2) SCTP, or (3) ICMPv6 packet.
Weakness: CWE-17
Which versions are affected by CVE-2015-6496?
It affects 2 products.
Linux distribution packages (11)
conntrack-tools SUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5 | All versions | 1.4.2-5.2 |
libnetfilter_cthelper SUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5 | All versions | 1.0.0-7.1 |
libnetfilter_cttimeout SUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5 | All versions | 1.0.0-9.1 |
conntrack-tools SUSE:Linux Enterprise High Availability Extension 11 SP3 | All versions | 1.0.0-0.9.1 |
conntrack-tools SUSE:Linux Enterprise High Availability Extension 11 SP4 | All versions | 1.0.0-0.9.1 |
conntrack-tools SUSE:Linux Enterprise High Availability Extension 12 | All versions | 1.4.2-5.2 |
libnetfilter_cthelper SUSE:Linux Enterprise High Availability Extension 12 | All versions | 1.0.0-7.1 |
libnetfilter_cttimeout SUSE:Linux Enterprise High Availability Extension 12 | All versions | 1.0.0-9.1 |
libnetfilter_cthelper SUSE:Linux Enterprise Software Development Kit 12 | All versions | 1.0.0-7.1 |
libnetfilter_cttimeout SUSE:Linux Enterprise Software Development Kit 12 | All versions | 1.0.0-9.1 |
conntrack-tools openSUSE:Tumbleweed | All versions | 1.4.4-1.3 |
Products include Debian Debian Linux, Netfilter Conntrack-Tools.
How do I fix CVE-2015-6496?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2015-6496 being exploited?
There is no known exploitation of CVE-2015-6496 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DLA-295-1, DSA-3341-1, GHSA-v3f5-57x9-2pvx, MGASA-2015-0363, SUSE-SU-2015:1545-1, SUSE-SU-2015:1683-1 and 1 more.