CVE-2015-6496

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service (crash) via a (1) DCCP, (2) SCTP, or (3) ICMPv6 packet.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-17

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugzilla.netfilter.org/show_bug.cgi?id=910Exploit, Issue Tracking, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174875.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174883.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-10/msg00015.htmlMailing List, Third Party Advisory
http://www.debian.org/security/2015/dsa-3341Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/08/14/4Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/08/18/1Mailing List, Third Party Advisory
https://git.netfilter.org/conntrack-tools/commit/?id=c392c159605956c7bd4a264ab4490e2b2704c0cdPatch, Vendor Advisory, URL Repurposed
http://bugzilla.netfilter.org/show_bug.cgi?id=910Exploit, Issue Tracking, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174875.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174883.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-10/msg00015.htmlMailing List, Third Party Advisory
http://www.debian.org/security/2015/dsa-3341Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/08/14/4Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/08/18/1Mailing List, Third Party Advisory
https://git.netfilter.org/conntrack-tools/commit/?id=c392c159605956c7bd4a264ab4490e2b2704c0cdPatch, Vendor Advisory, URL Repurposed

Timeline

Published: Aug 24, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-64978.8The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise E CVE-2015-64987.5Alcatel-Lucent Home Device Manager before 4.1.10, 4.2.x before 4.2.2 allows remote attackers to spoof and make calls as target devices.CVE-2015-65007.5Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated users to list directory CVE-2015-65016.1Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect users to arbitrary web s CVE-2015-65026.1Cross-site scripting (XSS) vulnerability in the console in Puppet Enterprise before 2015.2.1 allows remote attackers to inject arbitrary web CVE-2015-65064.3Cross-site scripting (XSS) vulnerability in the cryptography interface in Request Tracker (RT) before 4.2.12 allows remote attackers to inje CVE-2015-65077.2The hdbsql client 1.00.091.00 Build 1418659308-1530 in SAP HANA allows local users to cause a denial of service (memory corruption) and poss CVE-2015-65084.3Cross-site scripting (XSS) vulnerability in pfSense before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the desc CVE-2015-65094.3Multiple cross-site scripting (XSS) vulnerabilities in pfSense before 2.2.3 allow remote attackers to inject arbitrary web script or HTML vi CVE-2015-65104.3Multiple cross-site scripting (XSS) vulnerabilities in pfSense before 2.2.3 allow remote attackers to inject arbitrary web script or HTML vi CVE-2015-65114.3Cross-site scripting (XSS) vulnerability in pfSense before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the serv CVE-2015-65125.0SQL injection vulnerability in the get_messages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to