What’s Vulnerable › Vulnerabilities

CVE-2001-1244

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 22.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2002-05-03 · updated 2026-06-16

Description

Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.

Affected products

• FreeBSD: 4.3
• Hewlett Packard Enterprise (HPE) HP-UX: 11.00, 11.0.4, 11.11
• HP Vvos: 11.04
• Linux kernel: 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5
• Microsoft Windows 2000: all versions
• Microsoft Windows Nt: 4.0, 4.0-sp1, 4.0-sp2, 4.0-sp3, 4.0-sp4, 4.0-sp5 (+2)
• Netbsd: 1.5, 1.5.1
• OpenBSD: 2.8, 2.9
• Sunos: 5.5.1, 5.7, 5.8

References

• http://www.securityfocus.com/archive/1/195457
• http://www.securityfocus.com/bid/2997
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6824
• http://www.securityfocus.com/archive/1/195457
• http://www.securityfocus.com/bid/2997
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6824

Get alerted when CVE-2001-1244 or the next vulnerability affects your stack