Denial of Service Vulnerability in TCP Implementations by Multiple Vendors

CVE-2001-1244

Summary

Multiple TCP implementations are susceptible to attacks that exploit the maximum segment size (MSS). By setting the MSS to an extremely low value and requesting large amounts of data, attackers can cause significant bandwidth and CPU exhaustion. This results in an amplification of network traffic, as the server must process a greater number of smaller packets, overwhelming its resources and potentially leading to service disruption.

References