CVE catalog

CVE-2012-2663

iptables: CVE-2012-2663

Severity: Low
Published: Feb 15, 2014, 2:57:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 2.74% · Oct 25, 2026

extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	iptables	sid	`1.8.13-1`	vulnerable
Debian	iptables	forky	`1.8.13-1`	vulnerable
Debian	iptables	trixie	`1.8.11-2`	vulnerable
Debian	iptables	bookworm	`1.8.9-2`	vulnerable
Ubuntu	iptables	14.04	`1.4.18-1.1ubuntu1`	vulnerable
Ubuntu	iptables	14.04	`1.4.20-2`	vulnerable
Ubuntu	iptables	14.04	`1.4.20-2ubuntu1`	vulnerable
Ubuntu	iptables	14.04	`1.4.21-1ubuntu1`	vulnerable
Ubuntu	iptables	16.04	`1.4.21-2ubuntu2`	vulnerable
Ubuntu	iptables	16.04	`1.6.0-2ubuntu3`	vulnerable
Ubuntu	iptables	18.04	`1.6.1-2ubuntu1`	vulnerable
Ubuntu	iptables	18.04	`1.6.1-2ubuntu2`	vulnerable
Ubuntu	iptables	18.04	`1.6.1-2ubuntu2.1`	vulnerable
Ubuntu	iptables	20.04	`1.8.3-2ubuntu5`	vulnerable
Ubuntu	iptables	20.04	`1.8.4-3ubuntu1`	vulnerable
Ubuntu	iptables	20.04	`1.8.4-3ubuntu2`	vulnerable
Ubuntu	iptables	20.04	`1.8.4-3ubuntu2.1`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	iptables	source	sid	`(unfixed)`	unimportant	Not reported	[675445]
Debian	iptables	source	forky	`(unfixed)`	unimportant	Not reported	[675445]
Debian	iptables	source	trixie	`(unfixed)`	unimportant	Not reported	[675445]
Debian	iptables	source	bookworm	`(unfixed)`	unimportant	Not reported	[675445]

[Debian bug #675445]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[iptables]Affected
Details (2)
- 1.8.9-2 · amd64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
- 1.8.9-2 · arm64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
[libip4tc2]Affected
Source package: [iptables]
Details (2)
- 1.8.9-2 · amd64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
- 1.8.9-2 · arm64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
[libip4tc-dev]Affected
Source package: [iptables]
Details (2)
- 1.8.9-2 · amd64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
- 1.8.9-2 · arm64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
[libip6tc2]Affected
Source package: [iptables]
Details (2)
- 1.8.9-2 · amd64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
- 1.8.9-2 · arm64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
[libip6tc-dev]Affected
Source package: [iptables]
Details (2)
- 1.8.9-2 · amd64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
- 1.8.9-2 · arm64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
[libiptc0]Affected
Source package: [iptables]
Details (2)
- 1.8.9-2 · amd64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
- 1.8.9-2 · arm64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
[libiptc-dev]Affected
Source package: [iptables]
Details (2)
- 1.8.9-2 · amd64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
- 1.8.9-2 · arm64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
[libxtables12]Affected
Source package: [iptables]
Details (2)
- 1.8.9-2 · amd64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
- 1.8.9-2 · arm64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
[libxtables-dev]Affected
Source package: [iptables]
Details (2)
- 1.8.9-2 · amd64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12
- 1.8.9-2 · arm64 · bookworm
  Affected
  dsa · iptables · debian · bookworm; dsa · iptables · debian · 12

[Debian 13 (Trixie)]

[iptables]Affected
Details (2)
- 1.8.11-2 · amd64 · trixie
  Affected
  dsa · iptables · debian · 13
- 1.8.11-2 · arm64 · trixie
  Affected
  dsa · iptables · debian · 13
[libip4tc2]Affected
Source package: [iptables]
Details (2)
- 1.8.11-2 · amd64 · trixie
  Affected
  dsa · iptables · debian · 13
- 1.8.11-2 · arm64 · trixie
  Affected
  dsa · iptables · debian · 13
[libip4tc-dev]Affected
Source package: [iptables]
Details (2)
- 1.8.11-2 · amd64 · trixie
  Affected
  dsa · iptables · debian · 13
- 1.8.11-2 · arm64 · trixie
  Affected
  dsa · iptables · debian · 13
[libip6tc2]Affected
Source package: [iptables]
Details (2)
- 1.8.11-2 · amd64 · trixie
  Affected
  dsa · iptables · debian · 13
- 1.8.11-2 · arm64 · trixie
  Affected
  dsa · iptables · debian · 13
[libip6tc-dev]Affected
Source package: [iptables]
Details (2)
- 1.8.11-2 · amd64 · trixie
  Affected
  dsa · iptables · debian · 13
- 1.8.11-2 · arm64 · trixie
  Affected
  dsa · iptables · debian · 13
[libiptc-dev]Affected
Source package: [iptables]
Details (2)
- 1.8.11-2 · amd64 · trixie
  Affected
  dsa · iptables · debian · 13
- 1.8.11-2 · arm64 · trixie
  Affected
  dsa · iptables · debian · 13
[libxtables12]Affected
Source package: [iptables]
Details (2)
- 1.8.11-2 · amd64 · trixie
  Affected
  dsa · iptables · debian · 13
- 1.8.11-2 · arm64 · trixie
  Affected
  dsa · iptables · debian · 13
[libxtables-dev]Affected
Source package: [iptables]
Details (2)
- 1.8.11-2 · amd64 · trixie
  Affected
  dsa · iptables · debian · 13
- 1.8.11-2 · arm64 · trixie
  Affected
  dsa · iptables · debian · 13

Observed: Oct 23, 2026, 5:06:11 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]