CVE-2001-1244: Freebsd

Medium severity, CVSS 5.0. EPSS: 22% chance of exploitation in the next 30 days.

Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.

Affected products

• Freebsd Freebsd: version 4.3 only
• HP HP-Ux: version 11.00 only; version 11.0.4 only; version 11.11 only
• HP Vvos: version 11.04 only
• Linux Linux Kernel: version 2.4.0 only; version 2.4.1 only; version 2.4.2 only; version 2.4.3 only; version 2.4.4 only; version 2.4.5 only
• Microsoft Windows 2000: any version
• Microsoft Windows Nt: version 4.0 only
• Netbsd Netbsd: version 1.5 only; version 1.5.1 only
• OpenBSD OpenBSD: version 2.8 only; version 2.9 only
• Sun Sunos: version 5.5.1 only; version 5.7 only; version 5.8 only

Published 2001-07-07. Last modified 2026-06-16.