PT-2021-8285 · Linux · Linux

Published 2021-05-18 · Updated 2023-02-12 · CVE-2002-2438

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux (affected versions not specified)

Description The issue allows TCP firewalls to be circumvented by sending SYN packets with other flags set, such as the RST flag, which is not correctly discarded by the Linux TCP stack after firewalling.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2002-2438

Affected Products

Linux

References · 17

• 🔥 http://openwall.com/lists/oss-security/2012/05/30/11 · Exploit
• http://openwall.com/lists/oss-security/2012/05/31/3 · Patch
• http://openwall.com/lists/oss-security/2012/02/03/7 · Patch
• https://openwall.com/lists/oss-security/2012/02/03/7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-2438 · Security Note
• http://openwall.com/lists/oss-security/2012/05/30/2 · Patch
• http://openwall.com/lists/oss-security/2012/05/29/8 · Patch
• http://openwall.com/lists/oss-security/2012/05/30/4 · Note
• http://openwall.com/lists/oss-security/2012/05/30/9 · Note
• https://kb.cert.org/vuls/id/464113%2C · Note
• http://openwall.com/lists/oss-security/2012/05/30/8 · Note
• http://openwall.com/lists/oss-security/2014/02/12/8 · Note
• https://security.netapp.com/advisory/ntap-20210727-0003 · Note
• https://kb.cert.org/vuls/id/464113 · Note
• https://bugzilla.suse.com/show_bug.cgi?id=744994%2C · Note