CCE-92306-0| Platform: cpe:/o:amazon:linux:2 | Date: (C)2018-10-29 (M)2023-07-04 |
The Datagram Congestion Control Protocol (DCCP) is
Arelatively new transport layer protocol, designed to support
streaming media and telephony.
To configure the system to prevent the 'dccp'
kernel module from being loaded, add the following line to a file in the directory '/etc/modprobe.d':
Parameter:
[yes/no]
Technical Mechanism:
Disabling DCCP protects
the system against exploitation of any flaws in its implementation.
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 8.0 | Attack Vector: LOCAL |
| Exploit Score: 2.5 | Attack Complexity: LOW |
| Impact Score: 5.5 | Privileges Required: NONE |
| Severity: HIGH | User Interaction: NONE |
| Vector: AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H | Scope: UNCHANGED |
| | Confidentiality: HIGH |
| | Integrity: LOW |
| | Availability: HIGH |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:48493 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:48852 |
