An ecommerce application on a Linux server does not properly track the number of incoming connections to the server and may leave the server vulnerable to which of following?

Question

Options

• ABuffer Overflow Attack
• BStorage Consumption Attack
• CDenial of Service Attack
• DRace Condition

• A
  3% (1)
• B
  8% (3)
• C
  87% (34)
• D
  3% (1)

Explanation

When an application or operating system does not track or limit the number of active incoming connections, there is no mechanism to detect or throttle a connection flood. An attacker can send an overwhelming number of connection requests, exhausting the server's connection table, file descriptor limit, thread pool, or network stack resources. This renders the application unavailable to legitimate users - the definition of a Denial of Service (DoS) attack. This is closely related to a TCP connection exhaustion attack or HTTP flood. Option A (Buffer Overflow) requires memory corruption through malformed input, unrelated to connection counting. Option B (Storage Consumption) involves filling disk space with data, not connections. Option D (Race Condition) is a concurrency flaw in code logic, not a result of missing connection tracking.

No community discussion yet for this question.