Back to search
CVE-2002-2438
Published: May 18, 2021
Modified: Aug 8, 2024
PUBLISHED
Description
TCP firewalls could be circumvented by sending a SYN Packets with other flags (like e.g. RST flag) set, which was not correctly discarded by the Linux TCP stack after firewalling.
| Vendor | Product | Versions |
|---|---|---|
n/a | kernel | affected before Linux kernel 2.4.20 |
Weaknesses (CWE)
References
[oss-security] 20120530 Re: CVE Request -- kernel: tcp: drop SYN+FIN messages
mailing-list
x_refsource_MLIST
[oss-security] 20120530 Re: CVE Request -- kernel: tcp: drop SYN+FIN messages
mailing-list
x_refsource_MLIST
[oss-security] 20120530 Re: CVE Request -- kernel: tcp: drop SYN+FIN messages
mailing-list
x_refsource_MLIST
[oss-security] 20120530 Re: CVE Request -- kernel: tcp: drop SYN+FIN messages
mailing-list
x_refsource_MLIST
[oss-security] 20120530 Re: CVE Request -- kernel: tcp: drop SYN+FIN messages
mailing-list
x_refsource_MLIST
[oss-security] 20120203 Re: CVE Request (2002): Linux TCP stack could accept invalid TCP flag combinations
mailing-list
x_refsource_MLIST
[oss-security] 20120529 Re: CVE Request (2002): Linux TCP stack could accept invalid TCP flag combinations
mailing-list
x_refsource_MLIST
[oss-security] 20140212 Re: Old CVE ids, public, but still "RESERVED"
mailing-list
x_refsource_MLIST
[oss-security] 20120530 Re: CVE Request -- kernel: tcp: drop SYN+FIN messages
mailing-list
x_refsource_MLIST
[oss-security] 20120531 Re: CVE Request -- kernel: tcp: drop SYN+FIN messages
mailing-list
x_refsource_MLIST
[oss-security] 20120530 CVE Request -- kernel: tcp: drop SYN+FIN messages
mailing-list
x_refsource_MLIST
VU#464113
third-party-advisory
x_refsource_CERT-VN
https://www.kb.cert.org/vuls/id/464113%2C
x_refsource_MISC
https://bugzilla.suse.com/show_bug.cgi?id=744994%2C
x_refsource_MISC
https://www.openwall.com/lists/oss-security/2012/02/03/7
x_refsource_MISC
https://security.netapp.com/advisory/ntap-20210727-0003/
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now