CVE-2012-6638

Published February 15th, 2014

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.8

HIGH

Affected

PROJECT

Description

The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.

torvalds/linux

Linux kernel source tree

GitHub

237K