CVE-2002-0510

CVE-2002-0510

Medium · published August 12, 2002

CVSS v2.0
5.0
EPSS
2%
Percentile
84.4
In the wild
Unconfirmed
What it is

The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Linux.

The record
Technical detail
CVSS v2.0
5.0 · MEDIUM
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02483 · 84.4th percentile
Published
2002-08-12T08:00Z
Affected products (19)
ProductVersionsFixed in
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
EPSS history
Timeline
  • 11 JUN 04:00Z
    The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to…
    cvelistv5