[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-95708-4

Platform: cpe:/o:debian:debian_linux:11.x, cpe:/o:ubuntu:ubuntu_linux:16.04, cpe:/o:ubuntu:ubuntu_linux:18.04, cpe:/o:ubuntu:ubuntu_linux:20.04, cpe:/o:ubuntu:ubuntu_linux:22.04, cpe:/o:ubuntu:ubuntu_linux:23.04Date: (C)2021-07-27   (M)2023-09-01



Configure the loopback interface to accept traffic. Configure all other interfaces to deny traffic to the loopback network (127.0.0.0/8).Loopback traffic is generated between processes on machine and is typically critical to operation of the system. The loopback interface is the only place that loopback network (127.0.0.0/8) traffic should be seen, all other interfaces should ignore traffic on this network as an anti-spoofing measure. FIX: Make sure iptables-persistent installed. If you are using iptables, # iptables -A INPUT -i lo -j ACCEPT # iptables -A OUTPUT -o lo -j ACCEPT # iptables -A INPUT -s 127.0.0.0/8 -j DROP or If you are using ufw, # ufw allow in on lo # ufw deny in from 127.0.0.0/8 # ufw deny in from ::1 # iptables-save > /etc/iptables/rules.v4 # ip6tables-save > /etc/iptables/rules.v6


Parameter:

[Yes/No]


Technical Mechanism:

Run the following command: # ufw allow in on lo # ufw deny in from 127.0.0.0/8 # ufw deny in from ::1

CCSS Severity:CCSS Metrics:
CCSS Score : 8.4Attack Vector: LOCAL
Exploit Score: 2.5Attack Complexity: LOW
Impact Score: 5.9Privileges Required: NONE
Severity: HIGHUser Interaction: NONE
Vector: AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HScope: UNCHANGED
 Confidentiality: HIGH
 Integrity: HIGH
 Availability: HIGH
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:92237
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:87424
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:85285
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:73996
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:73994
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:73992


OVAL    6
oval:org.secpod.oval:def:73992
oval:org.secpod.oval:def:73996
oval:org.secpod.oval:def:85285
oval:org.secpod.oval:def:92237
...
XCCDF    9
xccdf_org.secpod_benchmark_general_Ubuntu_16_04
xccdf_org.secpod_benchmark_general_Ubuntu_18_04
xccdf_org.secpod_benchmark_NIST_800_53_r5_Debain_11
xccdf_org.secpod_benchmark_NIST_800_53_r5_Debian_11
...

© SecPod Technologies