CVE-2014-8160

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Mar 2, 2015
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-81614.3PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated uCVE-2014-81627.5XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to rCVE-2014-81636.5Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5.CVE-2014-81649.1A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red CVE-2014-816510.0scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to executeCVE-2014-81668.8The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackeCVE-2014-81675.9vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attackCVE-2014-81686.1Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.CVE-2014-81694.4automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values inCVE-2014-81708.8ovirt_safe_delete_config in ovirtfunctions.py and other unspecified locations in ovirt-node 3.0.0-474-gb852fd7 as packaged in Red Hat EnterpCVE-2014-81715.5The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new prCVE-2014-81724.9The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking ap