CVE-2003-0187

Linux Kernel 2.4.20 - Denial of Service via Netfilter Connection Tracking

Title source: llm
STIX 2.1

Description

The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to fail to identify connections with an UNCONFIRMED status and use large timeouts.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A260
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=105986028426824&w=2

Scores

EPSS 0.0192
EPSS Percentile 78.1%

Details

Status published
Products (1)
linux/linux_kernel 2.4.20
Published Aug 27, 2003
Tracked Since Feb 18, 2026