CVE-2005-0740 in OpenBSD

Summary

The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 03/13/2005
• Disclosure: 01/13/2005
• Moderation: VulDB entry created
• Entries: VDB-1116 (1)
• CPE: ready
• CWE: CWE-404 (Confirmed)
• Exploit: Download
• CVSS: 6.5
• EPSS: 0.00915
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-0740
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-0740
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-0740/