CVE-2001-1244 - CVE House
Back to Database
Status published Medium CVE-2001-1244

Multiple TCP implementations could allow remote attackers to cause a...

Vulnerability Description

Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2001-1244

Credits & Attribution

No credits recorded in the NVD database.

References

More from freebsd

View All →
CVE-2022-32264
sys/netinet/tcp_timer.h in FreeBSD before 7.0 contains a denial-of-service (DoS) vulnerability...
Unknown 0
CVE-2021-36159
libfetch before 2021-07-26, as used in apk-tools, xbps, and other...
Critical 9.1
CVE-2020-24718
bhyve, as used in FreeBSD through 12.1 and illumos (e.g.,...
High 8.2
CVE-2020-10566
grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12,...
High 7.8
CVE-2020-10565
grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12,...
High 7.8

Affected Vendor

Affected Software

freebsd, hp-ux, vvos, linux kernel, windows 2000, windows nt, netbsd, openbsd, sunos
Vulnerable Versions:
4.3, 11.00, 11.0.4, 11.11, 11.04, 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5, 4.0, 1.5, 1.5.1, 2.8, 2.9, 5.5.1, 5.7, 5.8

Timeline

Official Publish: May 3rd, 2002
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.