CVE-2005-0740

Published: Jan 13, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout.

Affected (17)

Products: Openbsd: Openbsd

Openbsd

1 product

Openbsd

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openbsd	Version 2.0
Openbsd Openbsd	Version 2.1
Openbsd Openbsd	Version 2.2
Openbsd Openbsd	Version 2.3
Openbsd Openbsd	Version 2.4
Openbsd Openbsd	Version 2.5
Openbsd Openbsd	Version 2.6
Openbsd Openbsd	Version 2.7
Openbsd Openbsd	Version 2.8
Openbsd Openbsd	Version 2.9
Openbsd Openbsd	Version 3.0
Openbsd Openbsd	Version 3.1
Openbsd Openbsd	Version 3.2
Openbsd Openbsd	Version 3.3
Openbsd Openbsd	Version 3.4
Openbsd Openbsd	Version 3.5
Openbsd Openbsd	Version 3.6