CVE-2015-6496: Debian Linux

Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days.

conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service (crash) via a (1) DCCP, (2) SCTP, or (3) ICMPv6 packet.

Affected products

• Debian Debian Linux: version 7.0 only; version 8.0 only
• Netfilter Conntrack-Tools: up to and including 1.4.2

Published 2015-08-24. Last modified 2026-06-17.