CVE-2003-0187
Linux Kernel 2.4.20 - Denial of Service via Netfilter Connection Tracking
Title source: llmDescription
The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to fail to identify connections with an UNCONFIRMED status and use large timeouts.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A260
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=105986028426824&w=2
Scores
EPSS
0.0192
EPSS Percentile
78.1%
Details
Status
published
Products (1)
linux/linux_kernel
2.4.20
Published
Aug 27, 2003
Tracked Since
Feb 18, 2026