CVE-2001-0851
mediumPriorität · verfolgen · 21EPSS 0.030 · 87. PerzentilEURUUSEPSS · bewertet 2026-10-27
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenRed Hat Linux 6.2redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. The procedure for upgrading the kernel is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2001:142 - BehobenRed Hat Linux 7.0redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. The procedure for upgrading the kernel is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2001:142 - BehobenRed Hat Linux 7.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. The procedure for upgrading the kernel is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2001:142 - BehobenRed Hat Linux 7.2redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. The procedure for upgrading the kernel is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2001:142
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.3–7.5
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (21)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- RHSA-2001:142Red Hat Security Advisory: kernel 2.2 and 2.42001-11-02csaf · redhat_csafUS
Syncookies are used to protect a system against certain Denial Of Service (DOS) attacks. A flaw in this mechanism has been found which can be used to circumvent certain types of firewall configurations. Note: syncookies are not enabled in the default installation of Red Hat Linux but many server administrators do enable syncookies.
auch bekannt als (14)
Weitere Namen und Kennungen dieser Entität.
- EUVD-2001-0834enisa_euvd
- BDU:2015-08107fstec_bdu
- BDU:2015-08111fstec_bdu
- BDU:2015-08115fstec_bdu
- BDU:2015-08118fstec_bdu
- BDU:2015-08120fstec_bdu
- BDU:2015-08122fstec_bdu
- BDU:2015-08123fstec_bdu
- BDU:2015-08124fstec_bdu
- BDU:2015-08125fstec_bdu
- BDU:2015-08128fstec_bdu
- BDU:2015-08131fstec_bdu
- RHSA-2002-026fstec_bdu
- GHSA-gfc3-m7qc-fc7menisa_euvd
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (14)
Externe Belege — Patches, Meldungen, Analysen.
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000432enisa_euvd
- http://www.caldera.com/support/security/advisories/CSSA-2001-038.0.txtenisa_euvd
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3enisa_euvd
- http://www.linuxsecurity.com/advisories/other_advisory-1683.htmlenisa_euvd
- http://www.novell.com/linux/security/advisories/2001_039_kernel2_txt.htmlenisa_euvd
- http://www.redhat.com/support/errata/RHSA-2001-142.htmlenisa_euvd
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7461enisa_euvd
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000432nvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan