CVE Catalog
CVE-1999-0116
MediumExploitation Probability (EPSS)
Very high risk5.52%
92th percentile - higher than 92% of all known CVEs
Summary
The vulnerability involves a Denial of Service (DoS) attack where an attacker sends many SYN packets to create multiple connections without sending an ACK packet, leading to system overload.
Risk Assessment
A SYN flood attack can result in service unavailability for users, impacting the organization's operational continuity.
Recommendation
It is recommended to implement DoS protection mechanisms, such as limiting the number of SYN connections and monitoring network traffic.
Original NVD description (English source)
Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood.