CVE-2012-6638: High severity linux kernel vulnerability
Last updated 24 July 2024
Other sources
Linux kernel built with the TCP/IP networking support(CONFIGINET) is vulnerable to a possible DoS attack. It could occur when accepting new TCP connection requests with 'SYN+FIN' flags instead of only 'SYN' flag set.
A remote user/program could use this flaw to cause DoS by sending multiple connection requests to a machine.
Upstream fix: ------------- -> https://git.kernel.org/linus/fdf5af0daf8019cec2396cdef8fb042d80fe71fa
The tcprcvstateprocess function in net/ipv4/tcpinput.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2012-6638?
CVE-2012-6638 has a high severity rating due to its potential to allow a denial of service attack.
How do I fix CVE-2012-6638?
To fix CVE-2012-6638, update your Linux kernel to a version that includes the necessary patches, such as those released by Red Hat or Debian.
What software is affected by CVE-2012-6638?
CVE-2012-6638 affects various versions of the Linux kernel, particularly those below version 3.2.24 and several specific Red Hat kernel packages.
Can CVE-2012-6638 be exploited remotely?
Yes, CVE-2012-6638 can be exploited remotely by a user or program to trigger a denial of service condition.
What do 'SYN+FIN' flags in TCP connection requests refer to in the context of CVE-2012-6638?
In the context of CVE-2012-6638, 'SYN+FIN' flags in TCP connection requests represent an abnormal state that can be used to initiate a denial of service attack.