What happened
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.
Affected versions
n/a: n/a Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
RepositoryAuthorFirst seenReference
www.securityfocus.comNVD reference2004-08-18VerifiedExploit-DB 291TCP Connection Reset - Remote Denial of ServicePaul A. Watson2004-04-23VerifiedExploit-DB 24030Multiple Vendor - TCP Sequence Number Approximation (1)Matt Edman2004-03-05VerifiedExploit-DB 24031Multiple Vendor - TCP Sequence Number Approximation (2)Paul A. Watson2004-04-20VerifiedExploit-DB 24032Multiple Vendor - TCP Sequence Number Approximation (3)Paul Watson2004-04-20VerifiedExploit-DB 24033Multiple Vendor - TCP Sequence Number Approximation (4)K-sPecial2004-04-23VerifiedExploit-DB 942Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)Yuri Gushin2005-04-17VerifiedExploit-DB 276Microsoft Windows XP/2000 - TCP Connection ResetAphex2004-04-22VerifiedSource timeline
CVE record published by NVDView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.