CCE-95524-5Platform: cpe:/o:amazon:linux:2, cpe:/o:centos:centos:7, cpe:/o:oracle:linux:7, cpe:/o:oracle:linux:8, cpe:/o:redhat:enterprise_linux:7, cpe:/o:redhat:enterprise_linux:8, cpe:/o:redhat:enterprise_linux:9 | Date: (C)2021-09-28 (M)2023-07-04 |
Configure the loopback interface to accept traffic. Configure all other interfaces to deny
traffic to the loopback network (127.0.0.0/8).Loopback traffic is generated between processes on machine and is typically critical to
operation of the system. The loopback interface is the only place that loopback network
(127.0.0.0/8) traffic should be seen, all other interfaces should ignore traffic on this
network as an anti-spoofing measure.
FIX:
While using iptables,
#yum remove -y firewalld
#yum install -y iptables iptables-services
#systemctl enable iptables
# iptables -A INPUT -i lo -j ACCEPT
# iptables -A OUTPUT -o lo -j ACCEPT
# iptables -A INPUT -s 127.0.0.0/8 -j DROP
#service iptables save
Note:
In the presence of firewalld package, iptables rules cannot be set as permanent. But removing firewalld package will lead to the removal of all rules currently configured in the machine. So patch is not provided for the rule.
Parameter:
[Yes/No]
Technical Mechanism:
Run the following command:
# iptables -A INPUT -i lo -j ACCEPT
# iptables -A OUTPUT -o lo -j ACCEPT
# iptables -A INPUT -s 127.0.0.0/8 -j DROP
CCSS Severity: | CCSS Metrics: |
CCSS Score : 6.6 | Attack Vector: LOCAL |
Exploit Score: 1.8 | Attack Complexity: LOW |
Impact Score: 4.7 | Privileges Required: LOW |
Severity: MEDIUM | User Interaction: NONE |
Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H | Scope: UNCHANGED |
| Confidentiality: LOW |
| Integrity: LOW |
| Availability: HIGH |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:74457 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:84296 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:74454 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:74453 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:74456 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:74455 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:74451 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:74452 |