CVE catalog
CVE-2015-6496
Security update for conntrack-tools
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 3.20% · Oct 25, 2026
conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service (crash) via a (1) DCCP, (2) SCTP, or (3) ICMPv6 packet.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | conntrack | 7 | 1:1.2.1-1 | vulnerable |
| Debian | conntrack | 7 | 1:1.2.1-1+deb7u1 | fixed |
| Debian | conntrack | 8 | 1:1.4.2-2 | vulnerable |
| Debian | conntrack | 8 | 1:1.4.2-2+deb8u1 | fixed |
| Debian | conntrack | 6.0 | 1:0.9.14-2 | vulnerable |
| Debian | conntrack | 6.0 | 1:0.9.14-2+deb6u1 | fixed |
| Suse | conntrack-tools | linux enterprise high availability extension 11 sp3 | 1.0.0-0.9.1 | fixed |
| Suse | conntrack-tools | linux enterprise high availability extension 11 sp4 | 1.0.0-0.9.1 | fixed |
| Opensuse | conntrack-tools | tumbleweed | 1.4.4-1.3 | fixed |
| Suse | conntrack-tools | linux enterprise high availability extension 12 | 1.4.2-5.2 | fixed |
| Suse | libnetfilter_cthelper | linux enterprise high availability extension 12 | 1.0.0-7.1 | fixed |
| Suse | libnetfilter_cttimeout | linux enterprise high availability extension 12 | 1.0.0-9.1 | fixed |
| Suse | libnetfilter_cthelper | linux enterprise software development kit 12 | 1.0.0-7.1 | fixed |
| Suse | libnetfilter_cttimeout | linux enterprise software development kit 12 | 1.0.0-9.1 | fixed |
| Suse | conntrack-tools | cloud compute node for suse linux enterprise 12 5 | 1.4.2-5.2 | fixed |
| Suse | libnetfilter_cthelper | cloud compute node for suse linux enterprise 12 5 | 1.0.0-7.1 | fixed |
| Suse | libnetfilter_cttimeout | cloud compute node for suse linux enterprise 12 5 | 1.0.0-9.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | conntrack | deb | 7 | 1:1.2.1-1+deb7u1 | Not reported | DSA-3341-1 | Not reported |
| Debian | conntrack | deb | 8 | 1:1.4.2-2+deb8u1 | Not reported | DSA-3341-1 | Not reported |
| Debian | conntrack | deb | 6.0 | 1:0.9.14-2+deb6u1 | Not reported | DLA-295-1 | Not reported |
| Suse | conntrack-tools | rpm | linux enterprise high availability extension 11 sp3 | 1.0.0-0.9.1 | Not reported | SUSE-SU-2015:1683-1 | Not reported |
| Suse | conntrack-tools | rpm | linux enterprise high availability extension 11 sp4 | 1.0.0-0.9.1 | Not reported | SUSE-SU-2015:1683-1 | Not reported |
| Opensuse | conntrack-tools | rpm | tumbleweed | 1.4.4-1.3 | Not reported | OPENSUSE-SU-2024:10430-1 | Not reported |
| Suse | conntrack-tools | rpm | linux enterprise high availability extension 12 | 1.4.2-5.2 | Not reported | SUSE-SU-2015:1545-1 | Not reported |
| Suse | libnetfilter_cthelper | rpm | linux enterprise high availability extension 12 | 1.0.0-7.1 | Not reported | SUSE-SU-2015:1545-1 | Not reported |
| Suse | libnetfilter_cttimeout | rpm | linux enterprise high availability extension 12 | 1.0.0-9.1 | Not reported | SUSE-SU-2015:1545-1 | Not reported |
| Suse | libnetfilter_cthelper | rpm | linux enterprise software development kit 12 | 1.0.0-7.1 | Not reported | SUSE-SU-2015:1545-1 | Not reported |
| Suse | libnetfilter_cttimeout | rpm | linux enterprise software development kit 12 | 1.0.0-9.1 | Not reported | SUSE-SU-2015:1545-1 | Not reported |
| Suse | conntrack-tools | rpm | cloud compute node for suse linux enterprise 12 5 | 1.4.2-5.2 | Not reported | SUSE-SU-2015:1545-1 | Not reported |
| Suse | libnetfilter_cthelper | rpm | cloud compute node for suse linux enterprise 12 5 | 1.0.0-7.1 | Not reported | SUSE-SU-2015:1545-1 | Not reported |
| Suse | libnetfilter_cttimeout | rpm | cloud compute node for suse linux enterprise 12 5 | 1.0.0-9.1 | Not reported | SUSE-SU-2015:1545-1 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
- [conntrackd]Unknown
Source package: [conntrack-tools]
Details (1)
1.4.9-1.5· x86_64 · tumbleweedUnknown · Fixed:
1.4.4-1.3Version impact unknown
pypi · conntrack-tools · opensuse · tumbleweed
- [conntrack-tools]Fixed
Source package: [conntrack-tools]
Details (1)
1.4.9-1.5· x86_64 · tumbleweedFixed · Fixed:
1.4.4-1.3pypi · conntrack-tools · opensuse · tumbleweed
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1545-1.json]
- [https://osv.dev/vulnerability/DLA-295-1]
- [https://osv.dev/vulnerability/DSA-3341-1]
- [https://osv.dev/vulnerability/SUSE-SU-2015:1545-1]
- [https://osv.dev/vulnerability/SUSE-SU-2015:1683-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:10430-1]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]