## Description

IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### linux - linux_kernel

Affected Versions:

- *

### linux - linux_kernel

Affected Versions:

- 2.2.0

## References

- http://marc.info/?l=bugtraq&m=93312523904591&w=2
- http://www.securityfocus.com/bid/543
  Patch Vendor Advisory
- http://marc.info/?l=bugtraq&m=93312523904591&w=2
- http://www.securityfocus.com/bid/543
  Patch Vendor Advisory

Neural Processor Active