VULNERABILITY INTELLIGENCE

CVE-2005-3945

CVSS score7.8 HIGH
EPSS probability12.26%
CISA KEVNot currently listed
Published2005-12-01
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C

Description

The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.

Primary references