CVE-2014-8160

net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.

• CWE-20

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=db29a9508a9246e77087c5531e45b2c88ec6988b
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0284.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0290.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0674.htmlThird Party Advisory
• http://www.debian.org/security/2015/dsa-3170Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:057Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:058Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/01/14/3Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/72061Third Party Advisory, VDB Entry
• http://www.spinics.net/lists/netfilter-devel/msg33430.htmlPatch, Third Party Advisory
• http://www.ubuntu.com/usn/USN-2513-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2514-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2515-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2516-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2517-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2518-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1182059Issue Tracking, Third Party Advisory
• https://github.com/torvalds/linux/commit/db29a9508a9246e77087c5531e45b2c88ec6988bPatch, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=db29a9508a9246e77087c5531e45b2c88ec6988b
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0284.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0290.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0674.htmlThird Party Advisory
• http://www.debian.org/security/2015/dsa-3170Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:057Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:058Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/01/14/3Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/72061Third Party Advisory, VDB Entry
• http://www.spinics.net/lists/netfilter-devel/msg33430.htmlPatch, Third Party Advisory
• http://www.ubuntu.com/usn/USN-2513-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2514-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2515-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2516-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2517-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2518-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1182059Issue Tracking, Third Party Advisory
• https://github.com/torvalds/linux/commit/db29a9508a9246e77087c5531e45b2c88ec6988bPatch, Third Party Advisory

Published

Mar 2, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-8154The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an i…
• CVE-2014-8155GnuTLS before 2.9.10 does not verify the activation and expi…
• CVE-2014-8156The D-Bus security policy files in /etc/dbus-1/system.d/*.co…
• CVE-2014-8157Off-by-one error in the jpc_dec_process_sot function in JasP…
• CVE-2014-8158Multiple stack-based buffer overflows in jpc_qmfb.c in JasPe…
• CVE-2014-8159The InfiniBand (IB) implementation in the Linux kernel packa…
• CVE-2014-8161PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before …4.3
• CVE-2014-8162XML external entity (XXE) in the RPC interface in Spacewalk …
• CVE-2014-8163Directory traversal vulnerability in the XMLRPC interface in…
• CVE-2014-8164A insecure configuration for certificate verification (http.…9.1
• CVE-2014-8165scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python …
• CVE-2014-8166The browsing feature in the server in CUPS does not filter A…8.8