TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Aug 18, 2004 |
| Freebsd | — | Upgrade FreeBSD | Dec 10, 2025 | Aug 11, 2016 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2Upgrade system/kernel to version 0.5.11-0.175.1.15.0.4.2 on Solaris 11.1 | May 29, 2017 | Aug 18, 2004 |
| Suse | — | Upgrade kernel-bigsmpUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-xenUpgrade kernel-bigsmp-develUpgrade kernel-default-develUpgrade kernel-trace-baseUpgrade kernel-ec2-develUpgrade kernel-ppc64-baseUpgrade kernel-xen-develUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-bigmemUpgrade kernel-xen-baseUpgrade kernel-pae-develUpgrade kernel-symsUpgrade kernel-bigmem-baseUpgrade kernel-ec2Upgrade kernel-trace-develUpgrade kernel-paeUpgrade kernel-pae-baseUpgrade kernel-traceUpgrade kernel-bigsmp-baseUpgrade kernel-ppc64Upgrade kernel-ec2-baseUpgrade kernel-bigmem-develUpgrade kernel-sourceUpgrade kernel-ppc64-devel | Apr 26, 2018 | Jun 27, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub