In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: add seqadj extension for natted connections Sequence adjustment may be required for FTP traffic with PASV/EPSV…
High CVSS 7.5
Summary
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: add seqadj extension for natted connections Sequence adjustment may be required for FTP traffic with PASV/EPSV modes. due to need to re-write packet payload (IP, port) on the ftp control connection. This can require changes to the TCP length and expected seq / ack_seq. The easiest way to reproduce this issue is with PASV mode. Example ruleset: table inet ftp_nat { ct helper ftp_helper { …
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/2b52d89cbbb0dbe3e948d8d9a91e704316dccfe6
- https://git.kernel.org/stable/c/4ab2cd906e4e1a19ddbda6eb532851b0e9cda110
- https://git.kernel.org/stable/c/4de80f0dc3868408dd7fe9817e507123c9dd8bb0
- https://git.kernel.org/stable/c/83273af0b60c093ba0085c205864d8542e1b1653
- https://git.kernel.org/stable/c/90918e3b6404c2a37837b8f11692471b4c512de2
- https://git.kernel.org/stable/c/b19492c25eff04852e0cb58f9bb8238b6695ed2d
- https://git.kernel.org/stable/c/b477ef7fa612fa45b6b3134d90d1eeb09396500a
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
Timeline
- nvd_ingest NVD