Denial of Service Vulnerability in OpenBSD TCP Stack

CVE-2005-0740 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout.

Learn more about our Web Application Penetration Testing UK.