CVE-2003-0187 — Vulnetix

Try Vulnetix Request Demo

CVE-2003-0187 PUBLISHED CVSS 5 MEDIUM

The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to fail to identify connections with an UNCONFIRMED status and use large timeouts.

EPSS 0.66% · 70.8th percentile

Risk Scores

CVSS v2.0

5

EPSS Score

0.66%

70.8th percentile

Affected Products

Vendor	Product	Versions
linux	linux_kernel	2.4.20
n/a	n/a	n/a

Timeline

Aug 5, 2003 CVE Published
Feb 4, 2022 EPSS Score
Mar 28, 2022 EPSS Score
May 19, 2022 EPSS Score
Jul 10, 2022 EPSS Score
Sep 1, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 14, 2022 EPSS Score
Feb 4, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 28, 2023 EPSS Score
May 19, 2023 EPSS Score

References

oval:org.mitre.oval:def:260 vdb
20030802 [SECURITY] Netfilter Security Advisory: Conntrack list_del() DoS mailing-list
https://nvd.nist.gov/vuln/detail/CVE-2003-0187 advisory

Open in Interactive Console →