CVE-2017-5972

The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets, as demonstrated by an attack against the kernel-3.10.0 package in CentOS Linux 7. NOTE: third parties have been unable to discern any relationship between the GitHub Engineering finding and the Trigemini.c attack code.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
VendorProductVersion
linuxlinux_kernel
3.0.0 ≤
𝑥
≤ 3.19.8
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bullseye
5.10.223-1
fixed
jessie
ignored
wheezy
no-dsa
bullseye (security)
5.10.226-1
fixed
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
sid
6.11.5-1
fixed
trixie
6.11.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
disco
not-affected
cosmic
not-affected
bionic
not-affected
artful
not-affected
zesty
not-affected
yakkety
not-affected
xenial
not-affected
trusty
ignored
precise
ignored
linux-armadaxp
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-aws
disco
not-affected
cosmic
not-affected
bionic
not-affected
artful
dne
zesty
dne
yakkety
dne
xenial
not-affected
trusty
not-affected
precise
dne
linux-aws-hwe
disco
dne
cosmic
dne
bionic
dne
xenial
not-affected
trusty
dne
linux-azure
disco
not-affected
cosmic
not-affected
bionic
not-affected
artful
dne
zesty
dne
yakkety
dne
xenial
not-affected
trusty
not-affected
linux-azure-edge
disco
dne
cosmic
dne
bionic
not-affected
xenial
not-affected
trusty
dne
linux-euclid
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
not-affected
trusty
dne
linux-flo
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
ignored
xenial
ignored
trusty
dne
precise
dne
linux-gcp
disco
not-affected
cosmic
not-affected
bionic
not-affected
artful
dne
zesty
dne
yakkety
dne
xenial
not-affected
trusty
dne
linux-gcp-edge
disco
dne
cosmic
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-gke
disco
dne
cosmic
dne
bionic
not-affected
artful
dne
zesty
dne
yakkety
dne
xenial
not-affected
trusty
dne
precise
dne
linux-goldfish
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
ignored
yakkety
ignored
xenial
ignored
trusty
dne
precise
dne
linux-grouper
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
dne
linux-hwe
disco
dne
cosmic
dne
bionic
not-affected
artful
dne
zesty
dne
yakkety
dne
xenial
not-affected
trusty
dne
precise
dne
linux-hwe-edge
disco
dne
cosmic
dne
bionic
not-affected
artful
dne
zesty
dne
yakkety
dne
xenial
not-affected
trusty
dne
precise
dne
linux-kvm
disco
not-affected
cosmic
not-affected
bionic
not-affected
artful
dne
zesty
dne
xenial
not-affected
trusty
dne
linux-linaro-omap
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-linaro-shared
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-linaro-vexpress
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-lts-quantal
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-lts-raring
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-lts-saucy
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-lts-trusty
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-lts-utopic
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
ignored
precise
dne
linux-lts-vivid
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
ignored
precise
dne
linux-lts-wily
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
ignored
precise
dne
linux-lts-xenial
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
not-affected
precise
dne
linux-maguro
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
dne
linux-mako
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
ignored
xenial
ignored
trusty
dne
precise
dne
linux-manta
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
dne
linux-oem
disco
not-affected
cosmic
not-affected
bionic
not-affected
artful
dne
zesty
dne
xenial
not-affected
trusty
dne
linux-oracle
disco
not-affected
cosmic
not-affected
bionic
not-affected
xenial
not-affected
trusty
dne
linux-qcm-msm
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-raspi2
disco
not-affected
cosmic
not-affected
bionic
not-affected
artful
not-affected
zesty
not-affected
yakkety
not-affected
xenial
not-affected
trusty
dne
precise
dne
linux-snapdragon
disco
not-affected
cosmic
dne
bionic
not-affected
artful
not-affected
zesty
not-affected
yakkety
not-affected
xenial
not-affected
trusty
dne
precise
dne
linux-ti-omap4
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored