CVE-2012-2663 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2012-2663 Interim 1 21 2025-11-05T05:38:17Z current 2021-05-30T13:03:52Z 2025-11-05T05:38:17Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2012-2663 extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2012-July/000194.html E-Mail link for SUSE-SU-2012:0904-1 https://lists.suse.com/pipermail/sle-security-updates/2012-October/000284.html E-Mail link for SUSE-SU-2012:1391-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP2 LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 iptables iptables-devel kernel-default-2.6.32.54-0.9.TDC.1 kernel-default-3.0.101-63.1 kernel-default-3.0.76-0.11.1 kernel-default-base-2.6.32.54-0.9.TDC.1 kernel-default-base-3.0.101-63.1 kernel-default-base-3.0.76-0.11.1 kernel-default-devel-2.6.32.54-0.9.TDC.1 kernel-default-devel-3.0.101-63.1 kernel-default-devel-3.0.76-0.11.1 kernel-default-man-3.0.101-63.1 kernel-default-man-3.0.76-0.11.1 kernel-docs-3.0.101-63.1 kernel-pae-3.0.101-63.1 kernel-pae-3.0.76-0.11.1 kernel-pae-base-3.0.101-63.1 kernel-pae-base-3.0.76-0.11.1 kernel-pae-devel-3.0.101-63.1 kernel-pae-devel-3.0.76-0.11.1 kernel-ppc64-3.0.101-63.1 kernel-ppc64-3.0.76-0.11.1 kernel-ppc64-base-3.0.101-63.1 kernel-ppc64-base-3.0.76-0.11.1 kernel-ppc64-devel-3.0.101-63.1 kernel-ppc64-devel-3.0.76-0.11.1 kernel-source-2.6.32.54-0.9.TDC.1 kernel-source-3.0.101-63.1 kernel-source-3.0.76-0.11.1 kernel-syms-2.6.32.54-0.9.TDC.1 kernel-syms-3.0.101-63.1 kernel-syms-3.0.76-0.11.1 kernel-trace-2.6.32.54-0.9.TDC.1 kernel-trace-3.0.101-63.1 kernel-trace-3.0.76-0.11.1 kernel-trace-base-2.6.32.54-0.9.TDC.1 kernel-trace-base-3.0.101-63.1 kernel-trace-base-3.0.76-0.11.1 kernel-trace-devel-2.6.32.54-0.9.TDC.1 kernel-trace-devel-3.0.101-63.1 kernel-trace-devel-3.0.76-0.11.1 kernel-xen-2.6.32.54-0.9.TDC.1 kernel-xen-3.0.101-63.1 kernel-xen-3.0.76-0.11.1 kernel-xen-base-2.6.32.54-0.9.TDC.1 kernel-xen-base-3.0.101-63.1 kernel-xen-base-3.0.76-0.11.1 kernel-xen-devel-2.6.32.54-0.9.TDC.1 kernel-xen-devel-3.0.101-63.1 kernel-xen-devel-3.0.76-0.11.1 kernel-default-2.6.32.54-0.9.TDC.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA kernel-default-base-2.6.32.54-0.9.TDC.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA kernel-default-devel-2.6.32.54-0.9.TDC.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA kernel-source-2.6.32.54-0.9.TDC.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA kernel-syms-2.6.32.54-0.9.TDC.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA kernel-trace-2.6.32.54-0.9.TDC.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA kernel-trace-base-2.6.32.54-0.9.TDC.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA kernel-trace-devel-2.6.32.54-0.9.TDC.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA kernel-xen-2.6.32.54-0.9.TDC.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA kernel-xen-base-2.6.32.54-0.9.TDC.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA kernel-xen-devel-2.6.32.54-0.9.TDC.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA kernel-default-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-default-base-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-default-devel-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-default-man-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-pae-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-pae-base-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-pae-devel-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-ppc64-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-ppc64-base-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-ppc64-devel-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-source-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-syms-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-trace-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-trace-base-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-trace-devel-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-xen-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-xen-base-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-xen-devel-3.0.76-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kernel-default-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-default-base-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-default-devel-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-default-man-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-pae-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-pae-base-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-pae-devel-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-ppc64-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-ppc64-base-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-ppc64-devel-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-source-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-syms-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-trace-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-trace-base-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-trace-devel-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-xen-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-xen-base-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-xen-devel-3.0.101-63.1 as a component of SUSE Linux Enterprise Server 11 SP4 kernel-docs-3.0.101-63.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 iptables as a component of SUSE Linux Enterprise Desktop 11 SP2 iptables as a component of SUSE Linux Enterprise Server 11 SP2 iptables as a component of SUSE Linux Enterprise Server 11 SP2 LTSS iptables-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 iptables as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant. CVE-2012-2663 SUSE Linux Enterprise Server 11 SP1-TERADATA:kernel-default-2.6.32.54-0.9.TDC.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:kernel-default-base-2.6.32.54-0.9.TDC.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:kernel-default-devel-2.6.32.54-0.9.TDC.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:kernel-source-2.6.32.54-0.9.TDC.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:kernel-syms-2.6.32.54-0.9.TDC.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:kernel-trace-2.6.32.54-0.9.TDC.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:kernel-trace-base-2.6.32.54-0.9.TDC.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:kernel-trace-devel-2.6.32.54-0.9.TDC.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:kernel-xen-2.6.32.54-0.9.TDC.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:kernel-xen-base-2.6.32.54-0.9.TDC.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:kernel-xen-devel-2.6.32.54-0.9.TDC.1 SUSE Linux Enterprise Server 11 SP3:kernel-default-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-default-base-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-default-devel-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-default-man-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-pae-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-pae-base-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-pae-devel-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-ppc64-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-ppc64-base-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-ppc64-devel-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-source-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-syms-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-trace-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-trace-base-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-trace-devel-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-xen-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-xen-base-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP3:kernel-xen-devel-3.0.76-0.11.1 SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-63.1 SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-63.1 SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-63.1 SUSE Linux Enterprise Desktop 11 SP2:iptables SUSE Linux Enterprise Server 11 SP2 LTSS:iptables SUSE Linux Enterprise Server 11 SP2:iptables SUSE Linux Enterprise Software Development Kit 11 SP2:iptables SUSE Linux Enterprise Software Development Kit 11 SP2:iptables-devel important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P