ID:10830 - Exploit for Resource exhaustion in Linux kernel - CVE-2001-1244

 
Main Vulnerability Database Exploits ID:10830 - Exploit for Resource exhaustion in Linux kernel - CVE-2001-1244

ID:10830 - Exploit for Resource exhaustion in Linux kernel - CVE-2001-1244

Published: November 6, 2024


Vulnerability identifier: #VU99986
Vulnerability risk: Low
CVE-ID: CVE-2001-1244
CWE-ID: CWE-400
Exploitation vector: Remote access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.


Remediation

Install update from vendor's repository.