CVE-2014-7250 in FreeBSD
Summary
The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers to cause a denial of service (resource consumption) via crafted packets.
Reservation
09/30/2014
Disclosure
12/11/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68266 | FreeBSD TCP Session Timer resource management | 399 | Unproven | Official fix | CVE-2014-7250 |