Vulnerability in Freebsd

CVE-2004-0171

FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequence TCP packets, which prevents the operating system from creating new connections.

EPSS: 0.032 (86.7th percentile) — read the EPSS interpretation.

Affected products

Freebsd — versions 4.6.2, 4.7, 4.8
Openbsd — versions 3.3, 3.4
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, x_refsource_APPLE)
cve@mitre.org (x_refsource_IDEFENSE, Patch, Vendor Advisory, third-party-advisory)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)