CVE

Id
7016  
CVE No.
CVE-2003-0187  
Status
Candidate  
Description
The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inconsistency with Linux 2.4.20"s support of linked lists, which causes Netfilter to fail to identify connections with an UNCONFIRMED status and use large timeouts.  
Phase
Assigned (20030401)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
40925 7016 CVE-2003-0187 BUGTRAQ:20030802 [SECURITY] Netfilter Security Advisory: Conntrack list_del() DoS  View
40926 7016 CVE-2003-0187 URL:http://marc.info/?l=bugtraq&m=105986028426824&w=2  View
40927 7016 CVE-2003-0187 OVAL:oval:org.mitre.oval:def:260  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63423 JVNDB-2003-000149 lv における任意のコマンドが実行される脆弱性 lv には、カレントディレクトリ内に格納されている lv 用の設定ファイルをそのまま読み込み、解釈する脆弱性が存在します。 CVE-2003-0188 7016 7.2 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000149.html  View