01 Record

CVE-2002-2185

The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 2.49% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 84.2% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2005-11-16 21:17Z20 YR AGO
Last updated: 2024-08-08 03:51Z2 YR AGO
Reserved: 2005-11-16
Assigning CNA: mitre
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.1
Document digest: 862d24989d53c1a5263ec8e8d1ac47b44324029de2c76d5b57cdf11a8c37119b

05 Affected products

VendorProductVersionsPlatforms

debiandebian_linuxNot specified—

mandrakesoftmandrake_linuxNot specified—

microsoftwindows_98Not specified—

microsoftwindows_98seNot specified—

microsoftwindows_xpNot specified—

redhatenterprise_linuxNot specified—

redhatenterprise_linux_desktopNot specified—

redhatlinuxNot specified—

redhatlinux_advanced_workstationNot specified—

sgiirixNot specified—

susesuse_linuxNot specified—

06 References

www.redhat.comRHSA-2006:0140http://www.redhat.com/support/errata/RHSA-2006-0140.htmlvendor-advisoryx_refsource_REDHAT
secunia.com18684http://secunia.com/advisories/18684third-party-advisoryx_refsource_SECUNIA
exchange.xforce.ibmcloud.comigmp-spoofed-report-dos(9436)https://exchange.xforce.ibmcloud.com/vulnerabilities/9436vdb-entryx_refsource_XF
oval.cisecurity.orgoval:org.mitre.oval:def:10736https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10736vdb-entrysignaturex_refsource_OVAL
patches.sgi.com20020901-01-Aftp://patches.sgi.com/support/free/security/advisories/20020901-01-Avendor-advisoryx_refsource_SGI
www.redhat.comRHSA-2006:0101http://www.redhat.com/support/errata/RHSA-2006-0101.htmlvendor-advisoryx_refsource_REDHAT
www.securityfocus.comFLSA:157459-2http://www.securityfocus.com/archive/1/428058/100/0/threadedvendor-advisoryx_refsource_FEDORA
www.securityfocus.comFLSA:157459-4http://www.securityfocus.com/archive/1/427981/100/0/threadedvendor-advisoryx_refsource_FEDORA
www.securityfocus.com5020http://www.securityfocus.com/bid/5020vdb-entryx_refsource_BID
online.securityfocus.com20020614 IGMP denial of service vulnerabilityhttp://online.securityfocus.com/archive/1/276968mailing-listx_refsource_BUGTRAQ
www.redhat.comRHSA-2006:0190http://www.redhat.com/support/errata/RHSA-2006-0190.htmlvendor-advisoryx_refsource_REDHAT
secunia.com18510http://secunia.com/advisories/18510third-party-advisoryx_refsource_SECUNIA
www.securityfocus.comFLSA:157459-1http://www.securityfocus.com/archive/1/428028/100/0/threadedvendor-advisoryx_refsource_FEDORA
www.cs.ucsb.eduhttp://www.cs.ucsb.edu/~krishna/igmp_dos/x_refsource_MISC
www.securityfocus.comFLSA:157459-3http://www.securityfocus.com/archive/1/427980/100/0/threadedvendor-advisoryx_refsource_FEDORA
www.redhat.comRHSA-2006:0191http://www.redhat.com/support/errata/RHSA-2006-0191.htmlvendor-advisoryx_refsource_REDHAT
secunia.com18562http://secunia.com/advisories/18562third-party-advisoryx_refsource_SECUNIA