Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2004-0230 — Small Space of Random Values in Network Data Loss Prevention
Severity
5.0MEDIUMNVD
EPSS
9.3%
top 7.23%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedAug 18
Latest updateJul 27
Description
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.
CVSS vector
AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9
Affected Packages10 packages
Also affects: Netbsd 1.5, 1.5.1, 1.5.2, 1.5.3, 1.6, 1.6.1, 1.6.2, 2.0
Patches
🔴Vulnerability Details
4GHSA▶
GHSA-r5mm-hvcj-hj6j: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect availability via unknown vectors related to Network, a dif↗2022-05-17
GHSA▶
GHSA-58p6-7f25-xqv3: TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to↗2022-05-03
GHSA▶
GHSA-vpm6-vh97-9hqc: Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to an "Integrity Problem" involving LIC-TC↗2022-05-01
OSV▶
CVE-2004-0230: TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to↗2004-08-18
💥Exploits & PoCs
7📋Vendor Advisories
6Debian▶
CVE-2004-0230: linux - TCP, when using a large Window Size, makes it easier for remote attackers to gue...↗2004