IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed TCP packets without any flags set.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Secureway_firewall | Ibm | 4.2 (including) | 4.2 (including) |
| Secureway_firewall | Ibm | 4.2.1 (including) | 4.2.1 (including) |