CVE-2005-2317: Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than...

Security readout for executives and security teams

This older Shorewall firewall flaw can let a device with a trusted MAC address skip other firewall rules. Business risk depends on whether the organization still runs affected Shorewall versions and uses the vulnerable MAC list settings. It is not listed as CISA KEV in the provided data. Exposure is likely limited to legacy Shorewall deployments using MAC list controls with the named vulnerable settings. Modern systems not running these Shorewall branches, or not using those MAC list options, are unlikely to be exposed based on the provided sources. Treat as targeted legacy-firewall risk. Prioritize quickly if Shorewall protects sensitive networks or if MAC-based trust is used; otherwise handle through legacy system remediation and package hygiene. Mitigation focus: Upgrade Shorewall to 2.4.1, 2.2.5, 2.0.17, or later as applicable.; Apply relevant Debian, Ubuntu, or Gentoo security updates where Shorewall is packaged by the distribution.; Review vendor guidance before changing MACLIST_TTL or MACLIST_DISPOSITION as a compensating control..

Prepared

Jun 29, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.