{"api_version":"1","generated_at":"2026-04-23T06:59:31+00:00","cve":"CVE-2002-2150","urls":{"html":"https://cve.report/CVE-2002-2150","api":"https://cve.report/api/cve/CVE-2002-2150.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2002-2150","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-2150"},"summary":{"title":"CVE-2002-2150","description":"Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections.","state":"PUBLISHED","assigner":"mitre","published_at":"2002-12-31 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.kb.cert.org/vuls/id/539363","name":"http://www.kb.cert.org/vuls/id/539363","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"title":"CERT/CC Vulnerability Note VU#539363","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/6023","name":"http://www.securityfocus.com/bid/6023","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Multiple Firewall Vendor Packet Flood State Table Filling Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.iss.net/security_center/static/10449.php","name":"http://www.iss.net/security_center/static/10449.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ISS X-Force Database: firewall-state-table-dos (10449): Multiple firewall full state table denial of service","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2002-2150","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-2150","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2002","cve_id":"2150","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"juniper","cpe5":"netscreen_screenos","cpe6":"2.10_r3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"2150","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"juniper","cpe5":"netscreen_screenos","cpe6":"2.10_r4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"2150","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"juniper","cpe5":"netscreen_screenos","cpe6":"2.7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"2150","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"juniper","cpe5":"netscreen_screenos","cpe6":"2.7.1r1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"2150","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"juniper","cpe5":"netscreen_screenos","cpe6":"2.7.1r2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"2150","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"juniper","cpe5":"netscreen_screenos","cpe6":"2.7.1r3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"2150","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"juniper","cpe5":"netscreen_screenos","cpe6":"3.0.1r1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"2150","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"juniper","cpe5":"netscreen_screenos","cpe6":"3.0.1r2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"2150","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"juniper","cpe5":"netscreen_screenos","cpe6":"3.0.3_r1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T03:51:17.599Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"6023","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/6023"},{"name":"VU#539363","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/539363"},{"name":"firewall-state-table-dos(10449)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"http://www.iss.net/security_center/static/10449.php"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2005-11-16T21:17:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"6023","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/6023"},{"name":"VU#539363","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/539363"},{"name":"firewall-state-table-dos(10449)","tags":["vdb-entry","x_refsource_XF"],"url":"http://www.iss.net/security_center/static/10449.php"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2002-2150","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"6023","refsource":"BID","url":"http://www.securityfocus.com/bid/6023"},{"name":"VU#539363","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/539363"},{"name":"firewall-state-table-dos(10449)","refsource":"XF","url":"http://www.iss.net/security_center/static/10449.php"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2002-2150","datePublished":"2005-11-16T21:17:00.000Z","dateReserved":"2005-11-16T00:00:00.000Z","dateUpdated":"2024-09-16T17:23:11.675Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2002-12-31 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"1CE7F646-B716-47D7-84E8-CA875A85C983"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r1:*:*:*:*:*:*:*","matchCriteriaId":"AA96638D-AD5F-4EFD-983B-181DCCF3EAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r2:*:*:*:*:*:*:*","matchCriteriaId":"2E30F9B6-24EB-44FB-9E73-5DD480A48CB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r3:*:*:*:*:*:*:*","matchCriteriaId":"B1648D07-823B-4BF9-87EC-DB34797B5B5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.10_r3:*:*:*:*:*:*:*","matchCriteriaId":"47DE8E73-0F1B-42E4-9BD6-7F5066D7330B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.10_r4:*:*:*:*:*:*:*","matchCriteriaId":"057B0387-44C0-45BE-9D91-D5A01C9D8020"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r1:*:*:*:*:*:*:*","matchCriteriaId":"D53868A9-67B6-40AD-B4F0-6911F1D2FC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r2:*:*:*:*:*:*:*","matchCriteriaId":"8AA52D22-A0D6-413A-9F49-0452356D2BE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3_r1.1:*:*:*:*:*:*:*","matchCriteriaId":"05578911-51E3-447B-98B6-083D3F35E8F1"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2002","CveId":"2150","Ordinal":"1","Title":"CVE-2002-2150","CVE":"CVE-2002-2150","Year":"2002"},"notes":[{"CveYear":"2002","CveId":"2150","Ordinal":"1","NoteData":"Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections.","Type":"Description","Title":"CVE-2002-2150"},{"CveYear":"2002","CveId":"2150","Ordinal":"2","NoteData":"2005-11-16","Type":"Other","Title":"Published"}]}}}