CVE-2003-0187

CVE-2003-0187 describes a denial-of-service vulnerability in the Netfilter connection tracking core of Linux kernel 2.4.20, specifically when CONFIG_IP_NF_CONNTRACK is enabled or the ip_conntrack module is loaded. Remote attackers can exploit an inconsistency in linked list handling, causing Netfilter to improperly manage connections with an UNCONFIRMED status and utilize excessively large timeouts, leading to resource exhaustion. This vulnerability has a CVSS score of 5.0, indicating a medium severity, with a network attack vector, low complexity, and potential for partial availability impact. There is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB, although it has garnered significant community discussion with 10 mentions.