Unscored severity · published Dec 6, 2001
CVE-2001-0851
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie
–
CVSS
3%
EPSS
No
On KEV
Description
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
2.0; 2.2.0; 2.4.0 · source: NVD
OP
Openlinux · Caldera
2.3 · source: NVD
OE
Openlinux Edesktop · Caldera
2.4 · source: NVD
OE
Openlinux Eserver · Caldera
2.3.1 · source: NVD
OS
Openlinux Server · Caldera
3.1 · source: NVD
OW
Openlinux Workstation · Caldera
3.1 · source: NVD
SL
Suse Linux · Suse
6.3; 6.4; 7.0; 7.1; 7.2; 7.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0851
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0851
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000432
Patch
http://www.caldera.com/support/security/advisories/CSSA-2001-038.0.txt
www.linux-mandrake.com
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3
Patch
http://www.linuxsecurity.com/advisories/other_advisory-1683.html
www.novell.com
http://www.novell.com/linux/security/advisories/2001_039_kernel2_txt.html
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2001-142.html
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability
