The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via packets with forged source addresses that cause a large number of hash table collisions.

Threat-Mapped Scoring

Score: 1.9

Priority: P3 - Important (Medium)

• S9 – Sabotage of System/App
• S10 – Denial of Service (+0.1 bonus)

EPSS

Score: 0.06885
Percentile: 0.9094

CVSS Scoring

Affected Products

• cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*

← Back to Home