CVE-2002-2185: Debian Linux

Medium severity, CVSS 4.9. EPSS: 2.5% chance of exploitation in the next 30 days.

The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.

Affected products

• Debian Debian Linux: version 2.2 only
• Mandrakesoft Mandrake Linux: version 8.0 only; version 8.1 only; version 8.2 only
• Microsoft Windows 98: any version
• Microsoft Windows 98se: any version
• Microsoft Windows XP: any version
• Red Hat Enterprise Linux: version 3.0 only; version 4.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only; version 4.0 only
• Red Hat Linux: version 6.2 only; version 7.0 only; version 7.1 only; version 7.2 only; version 7.3 only
• Red Hat Linux Advanced Workstation: version 2.1 only
• Sgi Irix: version 6.5 only; version 6.5.1 only; version 6.5.2 only; version 6.5.3 only; version 6.5.4 only; version 6.5.5 only; …
• Suse Suse Linux: version 6.4 only; version 7.0 only; version 7.1 only; version 7.2 only; version 7.3 only; version 8.0 only

Published 2002-12-31. Last modified 2026-06-16.