CVE-2002-1912

HIGH

SkyStream EMR5000 1.16-1.18 - Denial of Service via Packet Flood

Title source: llm

Description

SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable the Ethernet interface when the buffers are full, which allows remote attackers to cause a denial of service (null pointer exception and kernel panic) via a large number of packets.

References (4)

Core 4

Core References

Broken Link, Exploit, Patch x_refsource_misc

http://www.globalintersec.com/adv/skystream-2002021001.txt

Broken Link, Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/295516

Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/5977

Broken Link vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/10380.php

Scores

CVSS v3 7.5

EPSS 0.0330

EPSS Percentile 87.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-476

Status published

Products (3)

skystream/emr5000 1.16

skystream/emr5000 1.17

skystream/emr5000 1.18

Published Dec 31, 2002

Tracked Since Feb 18, 2026