CVE-2006-1242

no score yetEPSS 3.5%

The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks.

EPSS: 3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
Published: 2006-03-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

linux:linux_kernel

References

http://secunia.com/advisories/19402
http://secunia.com/advisories/19955
http://secunia.com/advisories/20157
http://secunia.com/advisories/20398
http://secunia.com/advisories/20671

Check your stack JSON