CoreCVE
Back

HIGH

kernel: SYN cookie protection mechanism not properly implemented

Published Feb 14, 2017

Description

The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets, as demonstrated by an attack against the kernel-3.10.0 package in CentOS Linux 7. NOTE: third parties have been unable to discern any relationship between the GitHub Engineering finding and the Trigemini.c attack code.

Affected products

Remediation

Red Hat statement

This issue affects Red Hat Enterprise Linux 5,6, 7 and MRG-2 kernels. Red Hat has no plans to fix this issue at this time. While performance enhancements have been made upstream, Red Hat Product Security believes the report to be invalid and able to be mitigated with synproxy. This flaw is currently under investigation for validity and Red Hat is asking to revoke the CVE.

Metrics

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (12)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Feb 14, 2017
Updated Aug 5, 2024
Reserved Feb 12, 2017
Link CVE-2017-5972
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-5972
Red Hat
Severity Moderate
Public date Feb 12, 2017
Links CVE-2017-5972 - Bugzilla