Vulnerability in Openbsd

CVE-2005-0960

Multiple vulnerabilities in the SACK functionality in (1) tcp_input.c and (2) tcp_usrreq.c OpenBSD 3.5 and 3.6 allow remote attackers to cause a denial of service (memory exhaustion or system crash).

EPSS: 0.015 (70.8th percentile) — read the EPSS interpretation.

Affected products

Openbsd — versions 3.5, 3.6
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, Patch, x_refsource_OPENBSD)
cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (vendor-advisory, Patch, x_refsource_OPENBSD)