CVE-2002-2150 Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP...
MediumCVSS 5.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper netscreen screenos | = 2.7.1 | No fix listed |
| juniper netscreen screenos | = 2.7.1r1 | No fix listed |
| juniper netscreen screenos | = 2.7.1r2 | No fix listed |
| juniper netscreen screenos | = 2.7.1r3 | No fix listed |
| juniper netscreen screenos | = 2.10_r3 | No fix listed |
| juniper netscreen screenos | = 2.10_r4 | No fix listed |
| juniper netscreen screenos | = 3.0.1r1 | No fix listed |
| juniper netscreen screenos | = 3.0.1r2 | No fix listed |
| juniper netscreen screenos | = 3.0.3_r1.1 | No fix listed |
References
- firewall-state-table-dos(10449) vdb-entry
- VU#539363 third-party-advisory us-government-resource
- 6023 vdb-entry