Improper input validation in Nokia Ggsn

CVE-2003-0368

Nokia Gateway GPRS support node (GGSN) allows remote attackers to cause a denial of service (kernel panic) via a malformed IP packet with a 0xFF TCP option.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.020 (78.8th percentile) — read the EPSS interpretation.

Affected products

  • Nokia Ggsn — versions release_1
  • N/a — versions n/a

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_ATSTAKE, vendor-advisory)
  • cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (vdb-entry, x_refsource_XF)