The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-s390xUpgrade kernel-defaultUpgrade kernel-64k-pagesizeUpgrade kernel-s390Upgrade kernel-pseries64Upgrade kernel-smpUpgrade um-host-install-initrdUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-umUpgrade kernel-symsUpgrade kernel-pmac64Upgrade um-host-kernelUpgrade kernel-bigsmpUpgrade kernel-iseries64Upgrade kernel-sn2 | Feb 17, 2015 | Mar 15, 2006 |
| Ubuntu | — | Upgrade linux-image-2.6.12-10-iseries-smpUpgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.12-10-itaniumUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.12-10-itanium-smpUpgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.10-6-itanium-smpUpgrade linux-image-2.6.12-10-mckinley-smpUpgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.12-10-hppa64Upgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-2.6.10-6-power4-smpUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.10-6-powerpc | Nov 8, 2024 | Mar 15, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub