TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Aug 18, 2004 |
| Freebsd | — | Upgrade FreeBSD | Dec 10, 2025 | Aug 11, 2016 |
| Oracle Solaris | — | Upgrade system/kernel to version 0.5.11-0.175.1.15.0.4.2 on Solaris 11.1Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2 | May 29, 2017 | Aug 18, 2004 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-pae-develUpgrade kernel-default-baseUpgrade kernel-paeUpgrade kernel-docsUpgrade kernel-bigsmpUpgrade kernel-symsUpgrade kernel-bigsmp-develUpgrade kernel-default-develUpgrade kernel-ec2-develUpgrade kernel-bigmem-baseUpgrade kernel-trace-baseUpgrade kernel-xen-baseUpgrade kernel-bigmemUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-ec2Upgrade kernel-ppc64-baseUpgrade kernel-xen-develUpgrade kernel-defaultUpgrade kernel-sourceUpgrade kernel-ppc64-develUpgrade kernel-ppc64Upgrade kernel-bigsmp-baseUpgrade kernel-pae-baseUpgrade kernel-bigmem-develUpgrade kernel-ec2-baseUpgrade kernel-trace | Apr 26, 2018 | Jun 27, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub