Lucene search

K
nvd[email protected]NVD:CVE-2012-6638
HistoryFeb 15, 2014 - 2:57 p.m.

CVE-2012-6638

2014-02-1514:57:07
CWE-400
web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.3%

The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.

Affected configurations

NVD
Node
linuxlinux_kernelRange<3.0.38
OR
linuxlinux_kernelRange3.13.2.24

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.3%