Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2012-6638
HistoryFeb 15, 2014 - 2:57 p.m.

CVE-2012-6638

2014-02-1514:57:07
Debian Security Bug Tracker
security-tracker.debian.org
18
linux kernel
denial of service
syn+fin tcp

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

0.007

Percentile

81.1%

The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

0.007

Percentile

81.1%