VULNERABILITY INTELLIGENCE

CVE-2014-7250

CVSS score5 MEDIUM
EPSS probability4.75%
CISA KEVNot currently listed
Published2014-12-12
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers to cause a denial of service (resource consumption) via crafted packets.

Primary references