CVE-2012-2663

extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant.

• http://www.spinics.net/lists/netfilter-devel/msg21248.htmlPatch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=826702Issue Tracking, Mitigation, Patch, Third Party Advisory
• http://www.spinics.net/lists/netfilter-devel/msg21248.htmlPatch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=826702Issue Tracking, Mitigation, Patch, Third Party Advisory

Published

Feb 15, 2014

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2657Buffer overflow in the SQLDriverConnect function in unixODBC…
• CVE-2012-2658Buffer overflow in the SQLDriverConnect function in unixODBC…
• CVE-2012-2659Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-2660actionpack/lib/action_dispatch/http/request.rb in Ruby on Ra…
• CVE-2012-2661The Active Record component in Ruby on Rails 3.0.x before 3.…
• CVE-2012-2662Multiple cross-site scripting (XSS) vulnerabilities in Red H…
• CVE-2012-2664The sosreport utility in the Red Hat sos package before 2.2-…
• CVE-2012-2665Multiple heap-based buffer overflows in the XML manifest enc…
• CVE-2012-2666golang/go in 1.0.2 fixes all.bash on shared machines. dotest…9.8
• CVE-2012-2667Session fixation vulnerability in lib/user/sfBasicSecurityUs…
• CVE-2012-2668libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and e…
• CVE-2012-2669The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd,…