What’s Vulnerable › Vulnerabilities

CVE-2002-2185

• Severity: medium (CVSS 4.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2002-12-31 · updated 2026-06-16

Description

The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.

Affected products

• Debian Linux: 2.2
• Mandrakesoft Mandrake Linux: 8.0, 8.1, 8.2
• Microsoft Windows 98: all versions
• Microsoft Windows 98Se: all versions
• Microsoft Windows XP Service Pack 3: all versions
• Red Hat Enterprise Linux: 3.0, 4.0
• RedHat Enterprise Linux Desktop: 3.0, 4.0
• RedHat Linux: 6.2, 7.0, 7.1, 7.2, 7.3
• RedHat Linux Advanced Workstation: 2.1
• Sgi Irix: 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5 (+18)
• Suse Linux: 6.4, 6.4-alpha, 7.0, 7.0-alpha, 7.1, 7.1-alpha (+3)

References

• http://online.securityfocus.com/archive/1/276968
• http://secunia.com/advisories/18510
• http://secunia.com/advisories/18562
• http://secunia.com/advisories/18684
• http://www.cs.ucsb.edu/~krishna/igmp_dos/
• http://www.redhat.com/support/errata/RHSA-2006-0101.html
• http://www.redhat.com/support/errata/RHSA-2006-0140.html
• http://www.redhat.com/support/errata/RHSA-2006-0190.html
• http://www.redhat.com/support/errata/RHSA-2006-0191.html
• http://www.securityfocus.com/archive/1/427980/100/0/threaded
• http://www.securityfocus.com/archive/1/427981/100/0/threaded

Get alerted when CVE-2002-2185 or the next vulnerability affects your stack