DescriptionMultiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
Overall state of this security issue: Resolved
This issue is currently rated as having moderate severity.
|National Vulnerability Database|
Note from the SUSE Security TeamLinux was and is not affected by this problem. Please see the official Netfilter statement on it here. SUSE Bugzilla entries: 289761 [RESOLVED / INVALID], 895845 [RESOLVED / INVALID] No SUSE Security Announcements cross referenced.
SUSE Timeline for this CVECVE page created: Fri Jun 28 01:00:26 2013
CVE page last modified: Fri Oct 7 12:45:30 2022