The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-PAEUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-PAE-devel | Dec 1, 2016 | Feb 15, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 15, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 26, 2014 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 15, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-45-virtualUpgrade linux-image-2.6.32-45-genericUpgrade linux-image-2.6.32-45-ia64Upgrade linux-image-2.6.32-45-powerpcUpgrade linux-image-2.6.32-45-386Upgrade linux-image-3.2.0-29-powerpc-smpUpgrade linux-image-2.6.32-45-versatileUpgrade linux-image-2.6.32-350-ec2Upgrade linux-image-3.2.0-29-omapUpgrade linux-image-2.6.32-45-serverUpgrade linux-image-2.6.32-45-sparc64-smpUpgrade linux-image-3.2.0-29-genericUpgrade linux-image-2.6.32-45-lpiaUpgrade linux-image-2.6.32-45-preemptUpgrade linux-image-3.2.0-29-powerpc64-smpUpgrade linux-image-2.6.32-45-generic-paeUpgrade linux-image-3.2.0-29-highbankUpgrade linux-image-3.2.0-29-generic-paeUpgrade linux-image-2.6.32-45-sparc64Upgrade linux-image-3.2.0-1417-omap4Upgrade linux-image-3.2.0-29-virtualUpgrade linux-image-2.6.32-45-powerpc-smpUpgrade linux-image-2.6.32-45-powerpc64-smp | Nov 8, 2024 | Feb 15, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub