CVE-2004-0002
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/03/2004
Last modified:
03/04/2025
Description
The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large number of small packets to be produced, or (2) via a large number of packets with a small TCP payload, which cause a large number of calls to the resource-intensive sowakeup function.
Impact
Base Score 2.0
10.00
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:3.0:releng:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:3.5:stable:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:3.5.1:release:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:3.5.1:stable:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page