CVE-2002-20001: balasys dheater Uncontrolled Resource Consumption
Vulnerability summary
CVE-2002-20001 is a high (CVSS 7.5) Uncontrolled Resource Consumption vulnerability in balasys dheater. EPSS estimates a 24.64% chance of exploitation in the next 30 days, higher than 97.8% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 11-11-2021PublishedVulnerability first disclosed.
- 13-02-2025Last modifiedVulnerability information updated.
Description
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
24.64%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 24.64% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (researchgate.net)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
F524 products
- big-ip_access_policy_manager≥ 13.1.0, < 16.1.4 | ≥ 17.0.0, < 17.1.0
- big-ip_advanced_firewall_manager≥ 13.1.0, ≤ 17.1.2 | 17.5.0
- big-ip_advanced_web_application_firewall≥ 13.1.0, ≤ 17.1.2 | 17.5.0
- big-ip_analytics≥ 13.1.0, ≤ 17.1.2 | 17.5.0
- big-ip_application_acceleration_manager≥ 13.1.0, ≤ 17.1.2 | 17.5.0
Opensuse2 products
- openssl-1_1&distro=openSUSE Tumbleweed< 1.1.1m-4.1
- ssh-audit&distro=openSUSE Tumbleweed< 3.2.0-1.1
Stormshield2 products
- stormshield_management_center< 3.3.3
- stormshield_network_security≥ 2.7.0, < 4.3.16 | ≥ 4.4.0, < 4.6.3
Balasys1 product
- dheaterna
Hpe1 product
- arubaos-cx≥ 10.06.0000, < 10.06.0180 | ≥ 10.07.0000, < 10.07.0030 | ≥ 10.08.0000, < 10.08.0010 | ≥ 10.09.0000, < 10.09.0002
Suse1 product
- linux_enterprise_server11 | 12 | 15
6 vendors · 31 products
References
14 links- github.com/mozilla/ssl-config-generator/issues/162Issue Tracking
- cert-portal.siemens.com/productcert/pdf/ssa-506569.pdfThird Party Advisory
- www.suse.com/support/kb/doc/?id=000020510Third Party Advisory
- www.openssl.org/blog/blog/2022/10/21/tls-groups-configuration/Third Party Advisory
- support.f5.com/csp/article/K83120834Third Party Advisory
- dheatattack.comThird Party Advisory
Show all 14 references
- gitlab.com/dheatattack/dheaterThird Party Advisory
- dheatattack.gitlab.ioThird Party Advisory