VULNERABILITY INTELLIGENCE
CVE-2005-0356
CVSS score5 MEDIUM
EPSS probability82.76%
CISA KEVNot currently listed
Published2005-05-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
Primary references
- cret@cert.org
- cret@cert.org — Patch
- cret@cert.org
- cret@cert.org
- cret@cert.org
- cret@cert.org — Vendor Advisory
- cret@cert.org — Third Party Advisory, US Government Resource
- cret@cert.org — Exploit
- cret@cert.org