CCE-95027-9| Platform: cpe:/o:debian:debian_linux:11.x, cpe:/o:ubuntu:ubuntu_linux:20.04, cpe:/o:ubuntu:ubuntu_linux:22.04, cpe:/o:ubuntu:ubuntu_linux:23.04 | Date: (C)2020-10-15 (M)2023-09-01 |
IPtables is an application that allows a system administrator to configure the IPv4 tables, chains and rules provided by the Linux kernel firewall. ufw was developed to ease IPtables firewall configuration.
Rationale:
IPtables provides extra protection for the Linux system by limiting communications in and out of the box to specific IPv4 addresses and ports. Ubuntu provides UFW to ease firewall configuration.
Fix:
Activate ufw:
# ufw enable
Ensure that any needed ports, such as ssh access, are configured properly first.
Parameter:
[enable/disable]
Technical Mechanism:
Activate ufw:
# ufw enable
Ensure that any needed ports, such as ssh access, are configured properly first.
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 10.0 | Attack Vector: NETWORK |
| Exploit Score: 3.9 | Attack Complexity: LOW |
| Impact Score: 6.0 | Privileges Required: NONE |
| Severity: CRITICAL | User Interaction: NONE |
| Vector: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | Scope: CHANGED |
| | Confidentiality: HIGH |
| | Integrity: HIGH |
| | Availability: HIGH |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:65998 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:87326 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:92188 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:85103 |
