TCP SYN flood is where an attacker sends seemingly normal SYN requests to a server which cause it to respond with SYN-ACK packets. This causes the target machine to slowly run out of memory as it waits for ACK packets from the attacker.