CVE-2017-5972 in Linux Kernel
Summary
The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets, as demonstrated by an attack against the kernel-3.10.0 package in CentOS Linux 7.
Reservation
02/12/2017
Disclosure
02/14/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 96953 | Linux Kernel TCP Stack resource management | 399 | Proof-of-Concept | Not defined | CVE-2017-5972 |