CVE-2017-5972

The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows…

published February 14, 2017

CVSS
—
EPSS
24%
Percentile
97.8
In the wild
Unconfirmed
What it is

The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets, as demonstrated by an attack against the kernel-3.10.0 package in CentOS Linux 7. NOTE: third parties have been unable to discern any relationship between the GitHub Engineering finding and the Trigemini.c attack code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.23890 · 97.8th percentile
Published
2017-02-14T06:30Z
EPSS history
Timeline
  • 14 FEB 06:30Z
    The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows…
    cvelistv5